Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharacters in the subtitle_codepage parameter to subtitle.cgi.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.297
EPSS Ranking 96.4%