CVE advisoryCRITICAL
CVE-2022-36536
Syncovery Privilege Escalation via Crafted Session Tokens
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Syncovery for Linux could allow an unauthenticated attacker to escalate privileges by creating crafted session tokens. This may lead to unauthorized access to sensitive data or system control if the application is reachable.