CVE-2022-26250

HighCVSS 7.8

Published: 06/04/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Summary

Synaman version 5.1 and below was found to have weak file permissions, allowing authenticated attackers to escalate privileges.

Risk Assessment

The risk involves an attacker gaining higher privileges in the system, potentially leading to unauthorized access to sensitive data or full control over the application.

Recommendation

It is recommended to immediately update Synaman to the latest available version and review and tighten file permissions in the system.

Other vulnerabilities in Synaman

CVE-2022-26251High
The HTTP interface in Synaman version 5.1 and below allows authenticated attackers to execute arbitrary code and escalate privileges.

Original NVD description (English source)

Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS