CVE-2022-36534

HighCVSS 8.8

Published: 16/09/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

51.80%

99th percentile - higher than 99% of all known CVEs

Summary

Multiple remote code execution (RCE) vulnerabilities were discovered in Syncovery 9 for Linux version 9.47x and below via the Job_ExecuteBefore and Job_ExecuteAfter parameters in post_profilesettings.php.

Risk Assessment

An attacker can remotely execute arbitrary code on the server, leading to full system compromise, data theft, or service disruption.

Recommendation

Immediately update Syncovery to a version newer than 9.47x that includes fixes for these vulnerabilities.

Original NVD description (English source)

Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below was discovered to contain multiple remote code execution (RCE) vulnerabilities via the Job_ExecuteBefore and Job_ExecuteAfter parameters at post_profilesettings.php.