CVE-2024-47270
Low · 2.7CVSS
2.7
EPSS
0.2%
Published
May 27, 2026
CISA due date
—
The record
Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to limited file write via unspecified vectors.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-61709 OpenFGA is an authorization and permission engine built for developers. CWE-281
- CVE-2026-58510 GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code… CWE-281
- CVE-2026-23556 When oxenstored is tearing a domain down, the node data is cleaned up but the usage… CWE-281
- CVE-2026-58494 Wasmtime is a runtime for WebAssembly. CWE-281
- CVE-2026-4360 In the Tarfile.extract() function, the filter parameter is not passed properly when… CWE-281
- CVE-2026-40767 Unauthenticated Broken Access Control in wpForo Forum < 3.0.2 versions. CWE-281
- CVE-2026-44832 Snipe-IT is an IT asset/license management system. CWE-281
- CVE-2026-24194 NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler… CWE-281