CVE-2022-26251

HighCVSS 7.2

Published: 06/04/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.75%

75th percentile - higher than 75% of all known CVEs

The HTTP interface in Synaman version 5.1 and below allows authenticated attackers to execute arbitrary code and escalate privileges.

An attacker with access to the HTTP interface can take control of the Synaman system, compromising data confidentiality, integrity, and availability.

Immediately update Synaman to a version newer than 5.1 and restrict access to the HTTP interface to trusted networks only.

Original NVD description (English source)

The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS