Synology Dsm vulnerabilities

• synology diskstation manager (dsm) An improper certificate validation vulnerability in Email API in Synology DiskStation Manager ... CVE-2026-40539 7.1 HighSeptember 18, 2026
• synology diskstation manager (dsm) An improper restriction of excessive authentication attempts vulnerability in Auto block in... CVE-2026-40538 3.7 LowSeptember 18, 2026
• synology diskstation manager (dsm) An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability... CVE-2026-40535 6.5 MediumSeptember 18, 2026
• synology diskstation manager (dsm) An exposure of sensitive information through data queries vulnerability in Desktop API in... CVE-2026-40533 5.3 MediumSeptember 18, 2026
• synology diskstation manager (dsm) A server-side request forgery (SSRF) vulnerability in PersonMail API in Synology DiskStation... CVE-2026-40537 4.3 MediumSeptember 18, 2026
• synology diskstation manager (dsm) An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability... CVE-2026-40536 4.3 MediumSeptember 18, 2026
• synology diskstation manager (dsm) An improper neutralization of input during web page generation ('cross-site scripting')... CVE-2026-40534 5.4 MediumSeptember 18, 2026
• synology diskstation manager (dsm) A direct request ('forced browsing') vulnerability in Wallpaper Path in Synology DiskStation... CVE-2026-40532 6.5 MediumSeptember 18, 2026
• synology diskstation manager (dsm) An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager... CVE-2026-40531 4.3 MediumSeptember 18, 2026
• synology diskstation manager (dsm) An improper neutralization of special elements used in an SQL command ('SQL injection')... CVE-2026-4036 6.5 MediumSeptember 18, 2026
• synology diskstation manager (dsm) An improper neutralization of CRLF sequences ('CRLF injection') vulnerability in User API in... CVE-2026-40530 8.0 HighSeptember 18, 2026
• synology diskstation manager (dsm) An improper neutralization of special elements used in an SQL command ('SQL Injection')... CVE-2026-13683 2.7 LowSeptember 18, 2026
• synology diskstation manager (dsm) An improper neutralization of input during web page generation ('Cross-site Scripting')... CVE-2026-13623 4.8 MediumSeptember 18, 2026
• synology diskstation manager (dsm) An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability in Sharing API in... CVE-2026-13666 3.5 LowSeptember 18, 2026
• synology diskstation manager (dsm) An external control of file name or path vulnerability in Upload API in Synology DiskStation... CVE-2026-6205 8.1 HighSeptember 18, 2026
• synology diskstation manager (dsm) An incorrect permission assignment for critical resource vulnerability in LDAP API in Synology... CVE-2026-13673 8.8 HighSeptember 18, 2026
• synology diskstation manager (dsm) An improper encoding or escaping of output vulnerability in Auth API in Synology DiskStation... CVE-2026-13635 5.3 MediumSeptember 18, 2026
• synology diskstation manager (dsm) An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before... CVE-2026-13639 9.8 CriticalSeptember 18, 2026
• synology diskstation manager (dsm) An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager ... CVE-2026-13684 Public exploit 9.8 CriticalSeptember 18, 2026
• synology diskstation manager (dsm), diskstation manager +1 more Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation... CVE-2025-13392 8.1 HighMay 27, 2026
• synology diskstation manager (dsm), diskstation manager, unified controller (dsmuc) +1 more +3 more Improper control of dynamically-managed code resources vulnerability in WebAPI component in... CVE-2024-5401 4.3 MediumDecember 4, 2025
• synology diskstation manager (dsm), diskstation manager, unified controller (dsmuc) +1 more +3 more Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before... CVE-2024-45539 7.5 HighDecember 4, 2025
• synology diskstation manager (dsm), diskstation manager, unified controller (dsmuc) +1 more +3 more Cross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation... CVE-2024-45538 9.6 CriticalDecember 4, 2025
• synology diskstation manager (dsm), diskstation manager +1 more Missing authorization vulnerability in synocopy in Synology DiskStation Manager (DSM) before 7.1... CVE-2025-1021 7.5 HighApril 23, 2025
• synology beestation os (bsm), beestation os, diskstation manager (dsm) +3 more +5 more Improper encoding or escaping of output vulnerability in the webapi component in Synology... CVE-2024-50629 Public exploit EPSS 34.8% 5.3 MediumMarch 19, 2025
• syncology replication service, synology unified controller (dsmuc), unified controller +2 more Off-by-one error vulnerability in the transmission component in Synology Replication Service... CVE-2024-10442 10.0 CriticalMarch 19, 2025
• synology beestation os (bsm), beestation os, diskstation manager (dsm) +3 more +5 more Improper certificate validation vulnerability in the update functionality in Synology BeeStation... CVE-2024-10445 4.3 MediumMarch 19, 2025
• synology beestation os (bsm), beestation os, diskstation manager (dsm) +3 more +5 more Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology... CVE-2024-10441 Public exploit 9.8 CriticalMarch 19, 2025
• synology diskstation manager (dsm), diskstation manager +1 more Improper certificate validation vulnerability in the LDAP utilities in Synology DiskStation... CVE-2024-10444 7.5 HighMarch 19, 2025
• synology diskstation manager (dsm), diskstation manager +1 more URL redirection to untrusted site ('Open Redirect') vulnerability in file access component in... CVE-2024-0854 5.4 MediumJanuary 24, 2024
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +3 more +5 more Use of insufficiently random values vulnerability in User Management Functionality in Synology... CVE-2023-2729 5.9 MediumJune 13, 2023
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +3 more +5 more Uncontrolled search path element vulnerability in Backup Management Functionality in Synology... CVE-2023-0142 6.5 MediumJune 13, 2023
• synology diskstation manager (dsm), diskstation manager +1 more Server-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology... CVE-2022-27622 4.1 MediumOctober 25, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Missing authentication for critical function vulnerability in iSCSI management functionality in... CVE-2022-27623 7.4 HighOctober 25, 2022
• synology diskstation manager (dsm), diskstation manager +1 more A vulnerability regarding out-of-bounds read is found in the session processing functionality of... CVE-2022-3576 5.3 MediumOctober 20, 2022
• synology diskstation manager (dsm), diskstation manager +1 more A vulnerability regarding improper restriction of operations within the bounds of a memory buffer... CVE-2022-27624 10.0 CriticalOctober 20, 2022
• synology diskstation manager (dsm), diskstation manager +1 more A vulnerability regarding improper restriction of operations within the bounds of a memory buffer... CVE-2022-27625 10.0 CriticalOctober 20, 2022
• synology diskstation manager (dsm), diskstation manager +1 more A vulnerability regarding concurrent execution using shared resource with improper... CVE-2022-27626 10.0 CriticalOctober 20, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper neutralization of special elements used in an OS command ('OS Command Injection')... CVE-2022-27616 7.2 HighAugust 3, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper neutralization of special elements used in an OS command ('OS Command Injection')... CVE-2022-22684 7.2 HighJuly 28, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... CVE-2022-27610 6.5 MediumJuly 27, 2022
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in... CVE-2022-22687 9.8 CriticalMarch 25, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper neutralization of special elements used in a command ('Command Injection') vulnerability... CVE-2022-22688 8.8 HighMarch 25, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... CVE-2022-22679 6.5 MediumFebruary 7, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper neutralization of special elements in output used by a downstream component ('Injection'... CVE-2021-43929 6.5 MediumFebruary 7, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper neutralization of special elements used in an SQL command ('SQL Injection')... CVE-2021-43927 4.7 MediumFebruary 7, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper neutralization of special elements used in an SQL command ('SQL Injection')... CVE-2021-43926 4.7 MediumFebruary 7, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Improper neutralization of special elements used in an SQL command ('SQL Injection')... CVE-2021-43925 4.7 MediumFebruary 7, 2022
• synology diskstation manager (dsm), diskstation manager +1 more Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in... CVE-2022-22680 5.3 MediumFebruary 7, 2022
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more Improper neutralization of special elements in output used by a downstream component ('Injection'... CVE-2021-29084 7.5 HighJune 23, 2021
• Show olderLoading…