TI-2025-11637 Aliases CVE-2025-12686 GHSA-9f49-q57w-cw53

Buffer overflow in Synology BeeStation OS

MEDIUM 54CWE-120Published 2026-05-27 · Updated 2026-05-27

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.

Summary

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-65648 allows remote attackers to execute arbitrary code via unspecified vectors.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.02762 86th percentileScored 2026-11-07

Fix Fixed BeeStation OS (Synology): 1.3.2-65648

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Synology	BeeStation OS	1.3 to before 1.3.2-65648; 1.2 to before 1.3.2-65648; 1.1 to before 1.3.2-65648; 1.0 to before 1.3.2-65648	1.3.2-65648	Patch available	CNA

BeeStation OS VendorSynology Affected 1.3 to before 1.3.2-65648; 1.2 to before 1.3.2-65648; 1.1 to before 1.3.2-65648; 1.0 to before 1.3.2-65648 Fixed in 1.3.2-65648 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:o:synology:beestation_os::::::::	1.0 to before 1.3.2	Vulnerable	Synology

cpe:2.3:o:synology:beestation_os:*:*:*:*:*:*:*:* Versions 1.0 to before 1.3.2 Vulnerable ·Synology

Remediation

Fix · CNA BeeStation OS (Synology) Fixed in 1.3.2-65648

Timeline

2026-10-02 Threatist record created from CVE-2025-12686
2026-10-03 Alias added: GHSA-9f49-q57w-cw53

References

Advisory 1

Synology-SA-25:12 BeeStation (PWN2OWN 2025)

TI-2024-34049 Improper output encoding in Synology DiskStation Manager CVSS 3.1MEDIUM 5.3
TI-2024-09669 Improper output encoding in Synology DiskStation Manager CVSS 3.1CRITICAL 9.8
TI-2024-09673 Improper certificate validation in Synology DiskStation Manager CVSS 3.1MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences