CVE-2025-12686

Name of the Vulnerable Software and Affected Versions Synology BeeStation (affected versions not specified)

Description A critical zero-day remote code execution issue exists in Synology BeeStation. The vulnerability was discovered at Pwn2Own and allows for remote code execution. No details are provided regarding the number of potentially affected devices or any real-world incidents beyond its demonstration at Pwn2Own. No specific API endpoints, vulnerable parameters, or function names are mentioned in the provided information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.