VULNERABILITY INTELLIGENCE
CVE-2025-8074
CVSS score5.6 MEDIUM
EPSS probability0.09%
CISA KEVNot currently listed
Published2025-12-04
Last modified2026-09-25
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H
Description
Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors.
Weakness classification
- CWE-346: Origin Validation Error
Primary references
- security@synology.com — Vendor Advisory