Dashboard / CVE-2026-4793

CVE-2026-4793

HIGH
MEDIUM Priority: 0.01 BB Relevance: 30/100
Published: 2026-08-03 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: Required
S: Unchanged
C: High
I: High
A: High

Description

An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-of-service during installation.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
synology assistant < 7.0.7-50095

References & Advisories (1)

Bug Bounty Relevance

30 / 100
✓ Low complexity

CVSS Score

7.3 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.15%
Raw Score 0.001490
Percentile 4.1%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00149
2026-10-28
0.00149

Intelligence Sources

nvd ref →

External Links