https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-47272.htmlhttps://patchthecve.com/cve/CVE-2024-47272.htmlWed, 17 Jun 2026 07:56:49 +0000LOW 2.7: Incorrect authorization vulnerability in IO Module functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to limited file write via unspecified vectors.https://patchthecve.com/cve/CVE-2024-47271.htmlhttps://patchthecve.com/cve/CVE-2024-47271.htmlWed, 17 Jun 2026 07:56:49 +0000MEDIUM 4.9: Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to obtain sensitive information via unspecified vectors.https://patchthecve.com/cve/CVE-2024-47270.htmlhttps://patchthecve.com/cve/CVE-2024-47270.htmlWed, 17 Jun 2026 07:56:49 +0000LOW 2.7: Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to limited file write via unspecified vectors.https://patchthecve.com/cve/CVE-2024-47269.htmlhttps://patchthecve.com/cve/CVE-2024-47269.htmlWed, 17 Jun 2026 07:56:48 +0000MEDIUM 4.9: Cleartext transmission of sensitive information vulnerability in Export Key functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to obtain sensitive information via unspecified vectors.https://patchthecve.com/cve/CVE-2024-47268.htmlhttps://patchthecve.com/cve/CVE-2024-47268.htmlWed, 17 Jun 2026 07:56:48 +0000MEDIUM 4.9: Missing authorization vulnerability in AddOns functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to obtain sensitive information via unspecified vectors.https://patchthecve.com/cve/CVE-2024-47267.htmlhttps://patchthecve.com/cve/CVE-2024-47267.htmlWed, 17 Jun 2026 07:56:48 +0000LOW 2.7: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Archiving Pull functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to limited file write via unspecified vector