CVE-2022-49036 - An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081 allows local users to execute arbitrary code via unspecified vectors

Back Back to CVE browser

HIGH

An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081 allows local users to execute arbitrary code via unspecified vectors

Published Jun 3, 2026

7.8

HIGH

CVSS 3.1

EPSS 0.12%

Description

An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081 allows local users to execute arbitrary code via unspecified vectors.

Affected products

Vendor Synology Product Synology Active Backup for Business Recovery Media Creator Default
affected
- Version
  -
  Status
  affected
  Constraints
  <2.5.0-2081

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Synology

Synology Active Backup for Business Recovery Media Creator

affected

Version	Status	Constraints
-	affected	<2.5.0-2081

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-829

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-55998
Advisory
https://www.synology.com/en-global/releaseNote/ActiveBackupRecoveryMediaCreator
vendor-advisoryRelease Notes

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-55998		Advisory
https://www.synology.com/en-global/releaseNote/ActiveBackupRecoveryMediaCreator		vendor-advisoryRelease Notes