CVE-2013-6987

CVE-2013-6987 Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager DSM before 4.3-3810 Update 3 allow remote attackers to read, write, and delete arbitrary files via a .. dot dot Usage: python example: list filesystem python filelist.py...

synology-nas-cli

synology-nas-cli Audit a Synology NAS against the C3RB3R /.L0CK3D ransomware campaign with one command, fix what it finds with a second, and keep running DSM from the terminal afterwards. English · 繁體中文 · 简体中文 · 日本語 · 한국어 · Deutsch · Español · Français Canonical repository, releases and issues:...

CVE-2017-9554-Exploit-Tool

CVE-2017-9554-Exploit-Tool CVE-2017-9554 Exploit Tool Synology DiskStation Manager DSM 6.1.3-15152 - 'forgetpasswd.cgi' User Enumeration EXPLOIT Tool Exploit Author : Steve Kaun Exploit Tool Author : Ez0-yf Vendor Homepage : https://www.synology.com Version : Before 6.1.3-15152 CVE : CVE-2017-955...

CVE-2026-87801

An insertion of sensitive information into sent data vulnerability in the API framework in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read arbitrary files...

CVE-2026-92379

The Synology DiskStation Manager (DSM) contains an improper neutralization of input during web page generation vulnerability within the Notification API . This flaw exists in versions prior to 7.3.2-86009-5 and 7.4.1-90080-1 . A remote authenticated user can exploit this to read or write specific...

CVE-2026-87801

Synology DiskStation Manager (DSM) is vulnerable to an insertion of sensitive information into sent data within the API framework . This flaw allows remote authenticated users to read arbitrary files on the affected system. The vulnerability impacts versions prior to 7.3.2-86009-5 and 7.4.1-90080...

CVE-2026-87801

An insertion of sensitive information into sent data vulnerability in the API framework in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read arbitrary files...

EUVD-2026-124191

An insertion of sensitive information into sent data vulnerability in the API framework in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read arbitrary files...

EUVD-2026-124183

An authentication bypass using an alternate path or channel vulnerability in the OTP in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers with valid user credentials to read or write arbitrary files and conduct denial-of-service attacks...

CVE-2026-74857: Synology DiskStation Manager (DSM): A missing critical step in authentication vulnerability in the Auth API in Synology DiskStation Manager (DSM) before…

A missing critical step in authentication vulnerability in the Auth API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks...

PT-2026-145695

An insertion of sensitive information into sent data vulnerability in the API framework in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read arbitrary files...

CVE-2026-18596: Synology DiskStation Manager (DSM): An authentication bypass using an alternate path or channel vulnerability in the OTP in Synology DiskStation Manager…

An authentication bypass using an alternate path or channel vulnerability in the OTP in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers with valid user credentials to read or write arbitrary files and conduct denial-of-service attacks...

CVE-2026-76954: Synology DiskStation Manager (DSM): An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology…

An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology DiskStation Manager DSM before 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, and 7.4.1-90080-1 allows remote attackers to read or write arbitrary files and conduct denial-of-service...

CVE-2026-19048: Synology DiskStation Manager (DSM): An improper link resolution before file access vulnerability in the thumb in Synology DiskStation Manager (DSM) before…

An improper link resolution before file access vulnerability in the thumb in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write arbitrary files and conduct denial-of-service attacks...

CVE-2026-19414: Synology DiskStation Manager (DSM): A missing authorization vulnerability in the Promotion API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5…

A missing authorization vulnerability in the Promotion API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write specific files...

CVE-2026-77738: Synology DiskStation Manager (DSM): A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager (DSM) before…

A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files...

CVE-2026-81558: Synology DiskStation Manager (DSM): A missing authorization vulnerability in the SocketIo API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5…

A missing authorization vulnerability in the SocketIo API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write specific files...

CVE-2026-15201: Synology DiskStation Manager (DSM): An improper certificate validation vulnerability in the Support Form in Synology DiskStation Manager (DSM) before…

An improper certificate validation vulnerability in the Support Form in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows man-in-the-middle attackers to read arbitrary files and write specific files during support form submission...

CVE-2026-81559: Synology DiskStation Manager (DSM): A missing authorization vulnerability in the TaskScheduler API in Synology DiskStation Manager (DSM) before…

A missing authorization vulnerability in the TaskScheduler API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write specific files...

CVE-2026-124993: Synology DiskStation Manager (DSM): An incorrect authorization vulnerability in the Security Advisor in Synology DiskStation Manager (DSM) before…

An incorrect authorization vulnerability in the Security Advisor in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to read specific files...