CVE-2025-30028
CVSS Score
8.6
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files.
| CWE | CWE-89 |
| Vendor | synology |
| Product | active backup for business |
| Published | May 27, 2026 |
| Last Updated | May 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for synology active backup for business
Be the first to know when new high vulnerabilities affecting synology active backup for business are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
Synology / Active Backup for Business
* < 2.7.1-3234 * < 2.7.1-13234 * < 2.7.1-23234
References
Credits
PSIRT