Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2025-29846

A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.

  • Published: Dec 4, 2025
  • Updated: Dec 5, 2025
  • CVE: CVE-2025-29846
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.2
  • AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
synology / router_manager 1.3 1.3.1-9346
synology / router_manager 1.3.1-9346 1.3.1-9346.x
synology / router_manager 1.3.1-9346-update1 1.3.1-9346-update1.x
synology / router_manager 1.3.1-9346-update10 1.3.1-9346-update10.x
synology / router_manager 1.3.1-9346-update11 1.3.1-9346-update11.x
synology / router_manager 1.3.1-9346-update12 1.3.1-9346-update12.x
synology / router_manager 1.3.1-9346-update2 1.3.1-9346-update2.x
synology / router_manager 1.3.1-9346-update3 1.3.1-9346-update3.x
synology / router_manager 1.3.1-9346-update4 1.3.1-9346-update4.x
synology / router_manager 1.3.1-9346-update5 1.3.1-9346-update5.x
synology / router_manager 1.3.1-9346-update6 1.3.1-9346-update6.x
synology / router_manager 1.3.1-9346-update7 1.3.1-9346-update7.x
synology / router_manager 1.3.1-9346-update8 1.3.1-9346-update8.x
synology / router_manager 1.3.1-9346-update9 1.3.1-9346-update9.x