Skip to contentSynology Diskstation Manager (dsm) vulnerabilities
- synology diskstation manager (dsm)An improper neutralization of special elements used in an SQL command vulnerability in the Auth...CVE-2026-76954Public exploit9.8 Critical
- synology diskstation manager (dsm)An authentication bypass using an alternate path or channel vulnerability in the rsync in...CVE-2026-851018.6 High
- synology diskstation manager (dsm)An external control of system or configuration setting vulnerability in the synomount in Synology...CVE-2026-882664.3 Medium
- synology diskstation manager (dsm)A missing authorization vulnerability in the TaskScheduler API in Synology DiskStation Manager ...CVE-2026-815594.3 Medium
- synology diskstation manager (dsm)A missing authorization vulnerability in the SocketIo API in Synology DiskStation Manager (DSM)...CVE-2026-815584.3 Medium
- synology diskstation manager (dsm)A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager...CVE-2026-777384.3 Medium
- synology diskstation manager (dsm)An improper limitation of a pathname to a restricted directory vulnerability in the...CVE-2026-748504.3 Medium
- synology diskstation manager (dsm)A missing authorization vulnerability in the Promotion API in Synology DiskStation Manager (DSM)...CVE-2026-194144.3 Medium
- synology diskstation manager (dsm)A reachable assertion vulnerability in the synoscgi in Synology DiskStation Manager (DSM) before...CVE-2026-850985.3 Medium
- synology diskstation manager (dsm)An incorrect authorization vulnerability in the Security Advisor in Synology DiskStation Manager ...CVE-2026-1249935.3 Medium
- synology diskstation manager (dsm)An improper neutralization of input during web page generation vulnerability in the Notification...CVE-2026-923795.4 Medium
- synology diskstation manager (dsm)An improper neutralization of input during web page generation vulnerability in the DSMNotify in...CVE-2026-815575.4 Medium
- synology diskstation manager (dsm)A missing authorization vulnerability in the ACL API in Synology DiskStation Manager (DSM) before...CVE-2026-198335.4 Medium
- synology diskstation manager (dsm)An improper neutralization of input during web page generation vulnerability in the Audio Player...CVE-2026-136565.4 Medium
- synology diskstation manager (dsm)An improper certificate validation vulnerability in the Support Form in Synology DiskStation...CVE-2026-152015.9 Medium
- synology diskstation manager (dsm)An insertion of sensitive information into sent data vulnerability in the API framework in...CVE-2026-878016.5 Medium
- synology diskstation manager (dsm)An external control of file name or path vulnerability in the Media Parser in Synology...CVE-2026-165506.5 Medium
- synology diskstation manager (dsm)A missing authentication for critical functionality vulnerability in the Webdav API in Synology...CVE-2026-151986.5 Medium
- synology diskstation manager (dsm)An improper neutralization of CRLF sequences vulnerability in the SNMP API in Synology...CVE-2026-863436.8 Medium
- synology diskstation manager (dsm)An improper neutralization of special elements used in an OS command vulnerability in the VPN API...CVE-2026-757857.2 High
- synology diskstation manager (dsm)An access of uninitialized pointer vulnerability in the nfsd in Synology DiskStation Manager (DSM...CVE-2026-186337.5 High
- synology diskstation manager (dsm)An improper neutralization of special elements used in an SQL command vulnerability in the User...CVE-2026-815848.1 High
- synology diskstation manager (dsm)An improper link resolution before file access vulnerability in the thumb in Synology DiskStation...CVE-2026-190488.1 High
- synology diskstation manager (dsm)An authentication bypass using an alternate path or channel vulnerability in the OTP in Synology...CVE-2026-185968.1 High
- synology diskstation manager (dsm)A missing critical step in authentication vulnerability in the Auth API in Synology DiskStation...CVE-2026-748578.8 High
- synology diskstation manager (dsm)An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API...CVE-2026-187928.8 High
- synology diskstation manager (dsm)An authorization bypass through user-controlled key vulnerability in the SSOAuth in Synology...CVE-2026-136728.8 High
- synology diskstation manager (dsm)An improper certificate validation vulnerability in Email API in Synology DiskStation Manager ...CVE-2026-405397.1 High
- synology diskstation manager (dsm)An improper restriction of excessive authentication attempts vulnerability in Auto block in...CVE-2026-405383.7 Low
- synology diskstation manager (dsm)An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability...CVE-2026-405356.5 Medium
- synology diskstation manager (dsm)An exposure of sensitive information through data queries vulnerability in Desktop API in...CVE-2026-405335.3 Medium
- synology diskstation manager (dsm)A server-side request forgery (SSRF) vulnerability in PersonMail API in Synology DiskStation...CVE-2026-405374.3 Medium
- synology diskstation manager (dsm)An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability...CVE-2026-405364.3 Medium
- synology diskstation manager (dsm)An improper neutralization of input during web page generation ('cross-site scripting')...CVE-2026-405345.4 Medium
- synology diskstation manager (dsm)A direct request ('forced browsing') vulnerability in Wallpaper Path in Synology DiskStation...CVE-2026-405326.5 Medium
- synology diskstation manager (dsm)An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager...CVE-2026-405314.3 Medium
- synology diskstation manager (dsm)An improper neutralization of special elements used in an SQL command ('SQL injection')...CVE-2026-40366.5 Medium
- synology diskstation manager (dsm)An improper neutralization of CRLF sequences ('CRLF injection') vulnerability in User API in...CVE-2026-405308.0 High
- synology diskstation manager (dsm)An improper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2026-136832.7 Low
- synology diskstation manager (dsm)An improper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2026-136234.8 Medium
- synology diskstation manager (dsm)An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability in Sharing API in...CVE-2026-136663.5 Low
- synology diskstation manager (dsm)An external control of file name or path vulnerability in Upload API in Synology DiskStation...CVE-2026-62058.1 High
- synology diskstation manager (dsm)An incorrect permission assignment for critical resource vulnerability in LDAP API in Synology...CVE-2026-136738.8 High
- synology diskstation manager (dsm)An improper encoding or escaping of output vulnerability in Auth API in Synology DiskStation...CVE-2026-136355.3 Medium
- synology diskstation manager (dsm)An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before...CVE-2026-136399.8 Critical
- synology diskstation manager (dsm)An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager ...CVE-2026-13684Public exploit9.8 Critical
- synology diskstation manager (dsm), diskstation manager +1 moreImproper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation...CVE-2025-133928.1 High
- synology diskstation manager (dsm), diskstation manager, unified controller (dsmuc) +1 more +3 moreImproper control of dynamically-managed code resources vulnerability in WebAPI component in...CVE-2024-54014.3 Medium
- synology diskstation manager (dsm), diskstation manager, unified controller (dsmuc) +1 more +3 moreOut-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before...CVE-2024-455397.5 High
- synology diskstation manager (dsm), diskstation manager, unified controller (dsmuc) +1 more +3 moreCross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation...CVE-2024-455389.6 Critical
- Show moreLoading…