Synology DiskStation DS925+ MailPlus Redis Weak Cryptography for Passwords Remote Code Execution Vulnerability

July 15th, 2026
ZDI-26-423 ZDI-CAN-28554

CVE ID

CVE-2025-15660

CVSS Score

8.8 AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Vendors

Synology

Affected Products

DiskStation DS925+

Vulnerability Details

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation DS925+ devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the configuration of the MailPlus Redis instance. When storing passwords, the process encrypts them in a recoverable format. An attacker can leverage this vulnerability execute code in the context of root.

Additional Details

Synology has issued an update to correct this vulnerability. More details can be found at:
https://www.synology.com/en-global/security/advisory/Synology_SA_26_11

Disclosure Timeline

  • 2025-12-04 - Vulnerability reported to vendor
  • 2026-07-15 - Coordinated public release of advisory
  • 2026-07-15 - Advisory Updated

Credit

gcali (_gcali)

Back to Advisories