CVE-2025-10466

MEDIUM

Synology Safe Access Cross-Site Scripting

Generated titleSource: EIP title enrichment
STIX 2.1 vulnerability

Record summary

CVE-2025-10466 has a selected CVSS score of 5.9 (medium).

Description

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Safe Access in Synology Safe Access before 1.3.1-0329 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensitive information or conduct limited denial-of-service in SRM.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 27, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Safe Access

Browse Synology / Safe Access

Default status: affected

CVE List* to < 1.3.1-0329affected

References

2