CVE-2025-2539

POC - CVE-2025-2539 File Away Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state, and federal...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in postcss (CVE-2026-69153)

Summary A path traversal and source-map file read vulnerability in the postcss package CVE-2026-69153 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 8.5.23 in FP-15 on both Linux and Windows operating systems. Vulnerability Details...

CVE-2026-85101

An authentication bypass using an alternate path or channel vulnerability in the rsync in Synology DiskStation Manager DSM before 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, and 7.4.1-90080-1 allows remote attackers to read specific files, write arbitrary files, and conduct limited...

CVE-2026-85101

Synology DiskStation Manager (DSM) is affected by an authentication bypass vulnerability in the rsync component (CWE-288) prior to versions 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, and 7.4.1-90080-1. This flaw allows remote attackers to read specific files , write arbitrary files , and perf...

CVE-2026-77738

A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files...

CVE-2026-77738

A server-side request forgery (SSRF) vulnerability exists in the Credential API of Synology DiskStation Manager (DSM) . This flaw affects versions prior to 7.3.2-86009-5 and 7.4.1-90080-1 . It allows remote authenticated users to read specific files on the system. No specific exploit code or expl...

EUVD-2026-124201

A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files...

CVE-2026-74850

Synology DiskStation Manager (DSM) is vulnerable to an improper limitation of a pathname to a restricted directory in the contentextract component. This flaw allows remote authenticated users to read specific files. The vulnerability impacts versions before 7.3.2-86009-5 and 7.4.1-90080-1 . No sp...

CVE-2026-124993

An incorrect authorization vulnerability in the Security Advisor in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to read specific files...

CVE-2026-124993

An incorrect authorization vulnerability exists in the Security Advisor component of Synology DiskStation Manager (DSM) . This flaw allows remote attackers to read specific files on affected systems. The vulnerability impacts DSM versions before 7.3.2-86009-5 and 7.4.1-90080-1 . Remediation is av...

EUVD-2026-124197

An incorrect authorization vulnerability in the Security Advisor in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to read specific files...

CVE-2026-92379

An improper neutralization of input during web page generation vulnerability in the Notification API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

CVE-2026-92379

The Synology DiskStation Manager (DSM) contains an improper neutralization of input during web page generation vulnerability within the Notification API . This flaw exists in versions prior to 7.3.2-86009-5 and 7.4.1-90080-1 . A remote authenticated user can exploit this to read or write specific...

EUVD-2026-124196

An improper neutralization of input during web page generation vulnerability in the Notification API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

CVE-2026-81557

An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

CVE-2026-81557

A vulnerability in the DSMNotify component of Synology DiskStation Manager (DSM) allows remote authenticated users to read or write specific files. This is caused by improper neutralization of input during web page generation (CWE-79). The issue affects DSM versions prior to 7.3.2-86009-5 and 7.4...

EUVD-2026-124195

An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

EUVD-2026-124194

A missing authorization vulnerability in the ACL API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

CVE-2026-19833

A missing authorization vulnerability in the ACL API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

CVE-2026-19833

Synology DiskStation Manager (DSM) contains a missing authorization vulnerability in the ACL API affecting versions prior to 7.3.2-86009-5 and 7.4.1-90080 . This flaw allows remote authenticated users to perform unauthorized read or write operations on specific files. No specific exploit details ...