This exploit was successfully submitted during Pwn2Own Ireland 2024 against the Synology DiskStation DS1823xs+.

A blog post covers the details of the exploit.

The bug was assigned CVE-2024-10442. Synology's advisory can be found here.