CVE-2025-29845
published 2025-12-04CVE-2025-29845: A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.
PriorityP425medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.41%
32.4th percentile
A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| synology | router_manager | — | — |
| synology | router_manager | >= 1.3 < 1.3.1-9346 | 1.3.1-9346 |
| synology | synology_router_manager | >= 1.3 < 1.3.1-9346-13 | 1.3.1-9346-13 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-12-04
Published