A vulnerability categorized as critical" in a photo app installed by default on Synology network-attached storage devices could give attackers the ability to steal data and worse.