CVE-2026-77738

A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files...

CVE-2026-77738

A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files...

CVE-2026-77738

A server-side request forgery (SSRF) vulnerability exists in the Credential API of Synology DiskStation Manager (DSM) . This flaw affects versions prior to 7.3.2-86009-5 and 7.4.1-90080-1 . It allows remote authenticated users to read specific files on the system. No specific exploit code or expl...

EUVD-2026-124201

A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files...

CVE-2026-77738: Synology DiskStation Manager (DSM): A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager (DSM) before…

A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files...

PT-2026-145688

A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files...

CVE-2026-77682

A code injection vulnerability exists in Epiphany when the user invokes form autofill from the context menu on a page containing a malicious HTML form. In embed/web-process-extension/resources/js/ephyautofill.js, getSelector builds a CSS selector by directly interpolating an element's id attribut...