nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-30028 CVE-2025-30028
HIGH
Synology Active Backup for Business Arbitrary File Read Vulnerability
Record summary
CVE-2025-30028 has a selected CVSS score of 8.6 (high).
Description
A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated May 27, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Active Backup for BusinessBrowse Synology / Active Backup for BusinessDefault status: affected | CVE List | * to < 2.7.1-3234 | affected |
| * to < 2.7.1-13234 | affected | ||
| * to < 2.7.1-23234 | affected |
References
2Synology-SA-25:02 Active Backup for BusinessVendor advisory
https://www.synology.com/en-global/security/advisory/Synology_SA_25_02