CVE-2024-10443

✓ Confirmed 0-Day

Triaged: March 5, 2026 2 articles

VulnLookup ↗ NVD ↗ MITRE ↗

EPSS Score

Source: FIRST.org · 2026-05-24

75.64%

probability

This CVE has a 75.64% probability of being exploited in the next 30 days.

0% Top 98.9th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

CWE-707 · Improper Neutralization CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-77 · Command Injection CWE-78 · OS Command Injection

Synology Urges Patch for Critical Zero-Click RCE Flaw Affecting Millions of NAS Devices

TheHackerNews

Synology hurries out patches for zero-days exploited at Pwn2Own

BleepingComputer Nov 01, 2024

Signal Intelligence

Confidenceⓘ

85%

EPSS 75.64%

Mentions 2

Last Seen Nov 01, 2024

CNA Information

Analyst Note

CVE-2024-10443 was exploited at Pwn2Own 2024 (a live hacking competition with real-world exploitation) before patches were released on 2024-11-15. The BleepingComputer article explicitly identifies this as a zero-day exploited at Pwn2Own, indicating active exploitation prior to patch availability.

Triage Info

Decided atMar 05, 2026