PatchTheCVEsyncbreeze vulnerabilities and fixes
Recent CVEs affecting syncbreeze, with upgrade or downgrade steps. 12 tracked.
syncbreeze has 12 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-02-03. Highest priority: CVE-2020-36946 (score 50/100).
- CVE-2025-59900 MEDIUM 5.4 DOWNGRADE DOWNGRADE Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated C
- CVE-2025-59899 MEDIUM 5.4 DOWNGRADE DOWNGRADE Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated C
- CVE-2025-59898 MEDIUM 5.4 DOWNGRADE DOWNGRADE Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated C
- CVE-2025-59897 MEDIUM 5.4 DOWNGRADE DOWNGRADE Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated C
- CVE-2025-59896 MEDIUM 5.4 DOWNGRADE DOWNGRADE Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated C
- CVE-2025-59895 HIGH 7.5 DOWNGRADE DOWNGRADE Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote denial-of-service (
- CVE-2025-59894 HIGH 8.0 DOWNGRADE DOWNGRADE Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enter
- CVE-2025-59893 HIGH 8.0 DOWNGRADE DOWNGRADE Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enter
- CVE-2025-59892 HIGH 8.0 DOWNGRADE DOWNGRADE Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enter
- CVE-2025-59891 HIGH 8.0 DOWNGRADE DOWNGRADE Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enter
- CVE-2020-37100 HIGH 7.8 DOWNGRADE Sync Breeze Enterprise 12.4.18 contains an unquoted service path vulnerability that allows local attackers to
- CVE-2020-36946 HIGH 7.5 DOWNGRADE SyncBreeze 10.0.28 contains a denial of service vulnerability in the login endpoint that allows remote attacke
FAQ
How do I fix syncbreeze vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is syncbreeze being exploited right now?
None of the tracked syncbreeze CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which syncbreeze CVE should I patch first?
CVE-2020-36946 currently ranks highest (50/100): SyncBreeze 10.0.28 contains a denial of service vulnerability in the login endpoint that allows remote attacke.