Synology Patches BeeStation Zero-Day (CVE-2025-12686) Exposed at Pwn2Own 2025

Synology has patched a zero-day vulnerability in its BeeStation devices, demonstrated at the recent Pwn2Own competition. The flaw, assigned CVE-2025-12686, falls under the category of “buffer copy without input-size validation,” enabling an attacker to...