Approved changes feed: RSS · Atom

cpe:2.3:a:synology:photos:*:*:*:*:*:diskstation_manager:*:*

part: a version: * update: *

VendorSynology (65464e9b-7339-559d-9719-837f074e0220)
ProductPhotos (c93c555a-f635-5ffe-8a96-bac9ba4fab2e)
Edition*
Language*
Software edition*
Target softwarediskstation_manager
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10443 vulnerable 2026-06-08 06:23:46.589578 Details available
CRITICAL (9.8)
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Task Manager component in Synology BeePhotos before 1.0.2-10026 and 1.1.0-10053 and Synology Photos before 1.6.2-0720 and 1.7.0-0795 allows remote attackers to execute arbitrary code via unspecified vectors.
Published: 2024-11-15T10:23:51.233Z
Updated: 2025-09-16T06:02:16.158Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.