High severity7.8NVD Advisory· Published Jun 3, 2026· Updated Jun 10, 2026

CVE-2022-49036

Description

An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081 allows local users to execute arbitrary code via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Synology/Active Backup for Business Recovery Media Creatorllm-fuzzy
Range: <2.5.0-2081

Patches

Vulnerability mechanics

References

www.synology.com/en-global/releaseNote/ActiveBackupRecoveryMediaCreatornvdRelease Notes

News mentions

Synology: Five Vulnerabilities Disclosed, Including Two High-Severity Code Execution Flaws
Vypr Intelligence · Jun 3, 2026

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000