Synology zero-day discovered during pwn2own hacker contest. Stay safe out there.
https://www.wired.com/story/synology-zero-click-vulnerability/
Discussion
explain it like Iβm 5 ?
If you have a Synology NAS and its accessible from the internet, you're screwed.
RCE for NAS exposed to internet or via quickconnect service, and has the photos app installed. Please use a VPN like tailscale to access your devices. You can host your own controlplane for tailscale with headscale too.