{"vulnerability": "cve-2025-12686", "sightings": [{"uuid": "d6f08766-677d-458f-a30e-640b54e9eeec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12686", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m5ic4noyhs25", "content": "", "creation_timestamp": "2025-11-13T04:07:34.396935Z"}, {"uuid": "d8ad97a5-ebad-46ba-9014-72a94002749b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12686", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/115560011963481925", "content": "", "creation_timestamp": "2025-11-16T15:10:49.320856Z"}, {"uuid": "c2322987-699b-46e1-9784-c0acdb7d4674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12686", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3m5fkxguvhx2t", "content": "", "creation_timestamp": "2025-11-12T02:07:43.862614Z"}, {"uuid": "5fb94de2-553e-4787-be4f-dd65496c551b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12686", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m6nsv22tde2g", "content": "", "creation_timestamp": "2025-11-28T02:16:07.214215Z"}, {"uuid": "7762864d-fd71-4943-9faa-6ecf91de7f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12686", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m5gx6gpuno2i", "content": "", "creation_timestamp": "2025-11-12T15:19:03.400478Z"}, {"uuid": "a17bfbd9-6f19-454b-9a43-05fa308fe181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12686", "type": "seen", "source": "https://bsky.app/profile/synacktiv.com/post/3m6mn46e5522c", "content": "", "creation_timestamp": "2025-11-27T15:00:01.981158Z"}, {"uuid": "c182a153-f615-428a-a55d-44584c2641fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12686", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-d56b617f-162a2b3e495bc82f", "content": "", "creation_timestamp": "2025-11-12T21:10:57.460483Z"}, {"uuid": "739d1490-5f94-41b8-9773-3bf6101772ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12686", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3m5hku4ikede2", "content": "", "creation_timestamp": "2025-11-12T21:11:40.367123Z"}, {"uuid": "c7608d5c-f4c7-45fc-83b9-270f4409ed98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12686", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-1039/", "content": "", "creation_timestamp": "2025-12-03T05:00:00.000000Z"}, {"uuid": "a8270f9a-e227-41f8-adf7-d9c58d6dfefb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12686", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtatl6fgw2c", "content": "\ud83d\udd34 CVE-2025-12686 - Critical (9.8)\n\nBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCent...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-12686/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-27T10:01:48.401911Z"}, {"uuid": "059660cd-76ef-4581-bb83-254c74fc584a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12686", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mndntpkq5v25", "content": "\ud83d\udccc CVE-2025-12686 - Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-65648 allow... https://www.cyberhub.blog/cves/CVE-2025-12686", "creation_timestamp": "2026-06-02T22:37:06.207503Z"}, {"uuid": "5216a5ef-9e2d-4e24-bf94-6fb6bdaaff31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12686", "type": "seen", "source": "https://t.me/pphm_HackerNews/1121", "content": "Total Control Achieved Zero-Day Threatens Home Network Devices\n\nAn urgent security update has been released for the BeeStation OS, the operating system powering a popular personal cloud and network-attached storage (NAS) device. The patch addresses a zero-day vulnerability that was successfully demonstrated and exploited by security researchers during the prestigious Pwn2Own Ireland 2025 hacking competition. The flaw is officially tracked as CVE-2025-12686 and has been assigned a near-maximum severity rating of CVSS 9.8 (Critical).\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:04.615144Z"}, {"uuid": "d6b9b343-3e46-4251-ace8-a226e0c89599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12686", "type": "published-proof-of-concept", "source": "https://t.me/pphm_HackerNews/1121", "content": "Total Control Achieved Zero-Day Threatens Home Network Devices\n\nAn urgent security update has been released for the BeeStation OS, the operating system powering a popular personal cloud and network-attached storage (NAS) device. The patch addresses a zero-day vulnerability that was successfully demonstrated and exploited by security researchers during the prestigious Pwn2Own Ireland 2025 hacking competition. The flaw is officially tracked as CVE-2025-12686 and has been assigned a near-maximum severity rating of CVSS 9.8 (Critical).\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:25.522282Z"}, {"uuid": "1851c24b-1ed2-4a2a-9909-b5949aee8a99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12686", "type": "seen", "source": "https://t.me/ZerodayAlert/582", "content": "0\ufe0f\u20e3\u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 Pwn2Own \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 $40 \u0442\u044b\u0441\u044f\u0447 \u0437\u0430 \u043d\u0430\u0445\u043e\u0434\u043a\u0443 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Synology\n\n\ud83d\udd10Synology \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-12686 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 BeeStation OS, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u043c\u0438 \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.3.2-65648 \u0438 \u0432\u044b\u0448\u0435, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u2014 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\ud83d\udc4a \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Tek \u0438 anyfun \u0438\u0437 \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Synacktiv \u043d\u0430 \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0435 Pwn2Own Ireland 2025, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0448\u0451\u043b 21 \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \u0417\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u0443\u044e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 40 \u0442\u044b\u0441\u044f\u0447 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n\n\ud83d\udea8 \u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c \u0432 \u0418\u0440\u043b\u0430\u043d\u0434\u0438\u0438 \u043c\u0435\u0440\u043e\u043f\u0440\u0438\u044f\u0442\u0438\u0438 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 73 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043d\u0430 \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0435 \u0441\u0432\u044b\u0448\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u043f\u0440\u0438\u0437\u043e\u0432\u044b\u0445.\n\n#synology #beestation #pwn2own #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:11.331558Z"}, {"uuid": "9774b738-00ef-4b5f-aa54-a2101a1f85ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12686", "type": "seen", "source": "https://t.me/ZerodayAlert/582", "content": "0\ufe0f\u20e3\u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 Pwn2Own \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 $40 \u0442\u044b\u0441\u044f\u0447 \u0437\u0430 \u043d\u0430\u0445\u043e\u0434\u043a\u0443 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Synology\n\n\ud83d\udd10Synology \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-12686 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 BeeStation OS, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u043c\u0438 \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.3.2-65648 \u0438 \u0432\u044b\u0448\u0435, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u2014 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\ud83d\udc4a \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Tek \u0438 anyfun \u0438\u0437 \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Synacktiv \u043d\u0430 \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0435 Pwn2Own Ireland 2025, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0448\u0451\u043b 21 \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \u0417\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u0443\u044e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 40 \u0442\u044b\u0441\u044f\u0447 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n\n\ud83d\udea8 \u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c \u0432 \u0418\u0440\u043b\u0430\u043d\u0434\u0438\u0438 \u043c\u0435\u0440\u043e\u043f\u0440\u0438\u044f\u0442\u0438\u0438 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 73 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043d\u0430 \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0435 \u0441\u0432\u044b\u0448\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u043f\u0440\u0438\u0437\u043e\u0432\u044b\u0445.\n\n#synology #beestation #pwn2own #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:32.651996Z"}]}