CVE-2022-49042

An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper Backup Explorer before 3.0.1-0156 allows local users to execute arbitrary code via unspecified vectors.

Score

CVSS 3.1 7.8 High

Status

Analyzed - security@synology.com

Published

2026-06-03

Last modified

2026-06-03

Weaknesses

CWE-829

Affected products

• Hyper Backup Explorer (Synology)
• Synology Hyper Backup Explorer (Synology)

References

• https://www.synology.com/en-global/releaseNote/HyperBackupExplorer