Synology DiskStation DS925+: information disclosure vulnerability in C2 Identity Plugin
Zero Day Initiative reports CVE-2025-14713 in the C2 Identity Plugin on Synology DiskStation DS925+. A nearby unauthenticated attacker could expose sensitive information, including stored credentials. Synology has released a corrective update; check the device and update according to official…