PT-2026-43590

CVE-2025-66592

·

Published

2026-05-27

·

Updated

2026-10-07

Description by

CVSS 3.1
6.1
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Name of the Vulnerable Software and Affected Versions Synology Active Backup for Business Agent versions prior to 3.1.0-4967
Description An origin validation error occurs during installation, which allows local users to write arbitrary files containing restricted content.
Recommendations Update to version 3.1.0-4967 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-346: Origin Validation Error
Related identifiers
CVE-2025-66592
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com