CVE-2024-53286

Publication date

2025-07-23 04:11:30

Family

synology

State

PUBLISHED

Description

Improper neutralization of special elements used in an OS command (OS Command Injection) vulnerability in DDNS Record functionality in Synology Router Manager (SRM) before 1.3.1-9346-11 allows remote authenticated users with administrator privileges to execute arbitrary code via unspecified vectors.