{"id":"CVE-2025-14713","title":"An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server.","summary":"An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-749"],"vendor":"synology","product":"c2_identity_edge_server","affected":["c2_identity_edge_server < 1.76.0-0307"],"patched":["c2_identity_edge_server 1.76.0-0307"],"published":"2026-05-27","updated":"2026-09-30","sourceUpdated":"2026-09-30T21:10:00.190","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-14713","references":[{"url":"https://www.synology.com/en-global/security/advisory/Synology_SA_25_18","label":"security@synology.com"}],"tags":["nvd"],"epss":0.00475,"epssPercentile":0.38721,"ingestedAt":"2026-09-30T21:25:07.733Z","slug":"CVE-2025-14713","body":"## Overview\n\nAn Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server.\n\n## Affected\n\n- `c2_identity_edge_server < 1.76.0-0307`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `c2_identity_edge_server 1.76.0-0307`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}