CVE-2025-12686
Analyzed Analyzed - Analysis Complete
Buffer Overflow in Synology BeeStation Manager AdminCenter

Publication date: 2026-05-27

Last updated on: 2026-06-05

Assigner: Synology Inc.

Description
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-65648 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-27
Last Modified
2026-06-05
Generated
2026-06-16
AI Q&A
2026-05-27
EPSS Evaluated
2026-06-15
NVD
CVE-2025-12686
EUVD
EUVD-2025-209957
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
synology beestation_os From 1.0 (inc) to 1.3.2 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2025-12686 is a classic buffer overflow vulnerability found in the AdminCenter component of Synology BeeStation Manager (BSM) and BeeStation OS before version 1.3.2-65648. It occurs because the software copies data into a buffer without properly checking the size of the input, which can lead to memory corruption.

This flaw allows remote attackers to execute arbitrary code on the affected system by exploiting unspecified vectors, meaning they can potentially take control of the system remotely.

Compliance Impact

The provided information does not specify how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.

Impact Analysis

This vulnerability has a high severity with a CVSS base score of 9.8, indicating it poses a critical risk. If exploited, remote attackers can execute arbitrary code on your system without any privileges or user interaction.

The impact includes complete compromise of confidentiality, integrity, and availability of the affected system, potentially allowing attackers to take full control, steal sensitive data, disrupt services, or install malicious software.

Mitigation Strategies

To mitigate this vulnerability, users should immediately upgrade BeeStation OS to version 1.3.2-65648 or later.

Synology has not provided alternative mitigation steps, emphasizing the need for immediate updates.

Detection Guidance

Synology has not provided alternative mitigation steps or specific detection commands for CVE-2025-12686.

The recommended action is to upgrade BeeStation OS to version 1.3.2-65648 or later to mitigate the risk of this critical buffer overflow vulnerability.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-12686. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart