CVE-2026-92379 (v3: 5.4) 12 Nov 2026

An improper neutralization of input during web page generation vulnerability in the Notification API in Synology DiskStation Manager (DSM) before 7.3.... Read more ➔

CVE-2026-88266 (v3: 4.3) 12 Nov 2026

An external control of system or configuration setting vulnerability in the synomount in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7... Read more ➔

CVE-2026-87801 (v3: 6.5) 12 Nov 2026

An insertion of sensitive information into sent data vulnerability in the API framework in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and... Read more ➔

CVE-2026-86343 (v3: 6.8) 12 Nov 2026

An improper neutralization of CRLF sequences vulnerability in the SNMP API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-... Read more ➔

CVE-2026-85101 (v3: 8.6) 12 Nov 2026

An authentication bypass using an alternate path or channel vulnerability in the rsync in Synology DiskStation Manager (DSM) before 7.2.1-69057-13, 7.... Read more ➔

CVE-2026-85098 (v3: 5.3) 12 Nov 2026

A reachable assertion vulnerability in the synoscgi in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attacke... Read more ➔

CVE-2026-81584 (v3: 8.1) 12 Nov 2026

An improper neutralization of special elements used in an SQL command vulnerability in the User API in Synology DiskStation Manager (DSM) before 7.3.2... Read more ➔

CVE-2026-81559 (v3: 4.3) 12 Nov 2026

A missing authorization vulnerability in the TaskScheduler API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows rem... Read more ➔

CVE-2026-81558 (v3: 4.3) 12 Nov 2026

A missing authorization vulnerability in the SocketIo API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote a... Read more ➔

CVE-2026-81557 (v3: 5.4) 12 Nov 2026

An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation Manager (DSM) before 7.3.2-86009... Read more ➔

CVE-2026-77738 (v3: 4.3) 12 Nov 2026

A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows... Read more ➔

CVE-2026-76954 (v3: 9.8) 12 Nov 2026

An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology DiskStation Manager (DSM) before 7.2.1... Read more ➔

CVE-2026-75785 (v3: 7.2) 12 Nov 2026

An improper neutralization of special elements used in an OS command vulnerability in the VPN API in Synology DiskStation Manager (DSM) before 7.3.2-8... Read more ➔

CVE-2026-74857 (v3: 8.8) 12 Nov 2026

A missing critical step in authentication vulnerability in the Auth API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 a... Read more ➔

CVE-2026-74850 (v3: 4.3) 12 Nov 2026

An improper limitation of a pathname to a restricted directory vulnerability in the contentextract in Synology DiskStation Manager (DSM) before 7.3.2-... Read more ➔

CVE-2026-19833 (v3: 5.4) 12 Nov 2026

A missing authorization vulnerability in the ACL API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authen... Read more ➔

CVE-2026-19414 (v3: 4.3) 12 Nov 2026

A missing authorization vulnerability in the Promotion API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote... Read more ➔

CVE-2026-19048 (v3: 8.1) 12 Nov 2026

An improper link resolution before file access vulnerability in the thumb in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1... Read more ➔

CVE-2026-18792 (v3: 8.8) 12 Nov 2026

An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation Manager (DSM) before 7.3.2-860... Read more ➔

CVE-2026-18633 (v3: 7.5) 12 Nov 2026

An access of uninitialized pointer vulnerability in the nfsd in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remot... Read more ➔

CVE-2026-18596 (v3: 8.1) 12 Nov 2026

An authentication bypass using an alternate path or channel vulnerability in the OTP in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.... Read more ➔

CVE-2026-16550 (v3: 6.5) 12 Nov 2026

An external control of file name or path vulnerability in the Media Parser in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-... Read more ➔

CVE-2026-15201 (v3: 5.9) 12 Nov 2026

An improper certificate validation vulnerability in the Support Form in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allo... Read more ➔

CVE-2026-15198 (v3: 6.5) 12 Nov 2026

A missing authentication for critical functionality vulnerability in the Webdav API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4... Read more ➔

CVE-2026-13672 (v3: 8.8) 12 Nov 2026

An authorization bypass through user-controlled key vulnerability in the SSOAuth in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-... Read more ➔