type: cve · created: 2026-11-03 · updated: 2026-11-03 · tags: [cve] · confidence: medium · severity: medium · affected_sectors: [global] · au_impact: false
Synology warned customers to update immediately amid a surge of C3RB3R (Cerber-imposter) ransomware attacks exploiting DiskStation Manager flaws patched in December 2024 — including CVE-2024-10441 (arbitrary code execution), CVE-2024-50629 (arbitrary file read) and CVE-2024-10445 (arbitrary file write) — against devices running outdated versions.
| Attribute | Detail |
|---|---|
| CVE | CVE-2024-50629 |
| CVSS | 5.3 (MEDIUM) |
| Vendor / product | synology |
| Reported | 2026-11-03 |