CVE-2026-81557

An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

CVE-2026-81557

A vulnerability in the DSMNotify component of Synology DiskStation Manager (DSM) allows remote authenticated users to read or write specific files. This is caused by improper neutralization of input during web page generation (CWE-79). The issue affects DSM versions prior to 7.3.2-86009-5 and 7.4...

CVE-2026-81557

An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

EUVD-2026-124195

An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

CVE-2026-81557: Synology DiskStation Manager (DSM): An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation…

An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...