Synology vulnerabilities
317 published CVEs name Synology among the affected products.
- 317Published CVEs317 of them scored
- 61Last 12 monthspublished in the last year
- 39Critical96 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-40539
An improper certificate validation vulnerability in Email API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2…
Synology · DiskStation Manager (DSM)
High7.1 - CVE-2026-40538
An improper restriction of excessive authentication attempts vulnerability in Auto block in Synology DiskStation Manager (DSM) before 7.2.1-69057-10,…
Synology · DiskStation Manager (DSM)
Low3.7 - CVE-2026-40535
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Desktop API in Synology DiskStation Manager (DSM) before…
Synology · DiskStation Manager (DSM)
Medium6.5 - CVE-2026-40533
An exposure of sensitive information through data queries vulnerability in Desktop API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10,…
Synology · DiskStation Manager (DSM)
Medium5.3 - CVE-2026-40537
A server-side request forgery (SSRF) vulnerability in PersonMail API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and…
Synology · DiskStation Manager (DSM)
Medium4.3 - CVE-2026-40536
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Audio API in Synology DiskStation Manager (DSM) before…
Synology · DiskStation Manager (DSM)
Medium4.3 - CVE-2026-40534
An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Video API in Synology DiskStation Manager (DSM) before…
Synology · DiskStation Manager (DSM)
Medium5.4 - CVE-2026-40532
A direct request ('forced browsing') vulnerability in Wallpaper Path in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and…
Synology · DiskStation Manager (DSM)
Medium6.5 - CVE-2026-40531
An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2…
Synology · DiskStation Manager (DSM)
Medium4.3 - CVE-2026-4036
An improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Sharing API in Synology DiskStation Manager (DSM)…
Synology · DiskStation Manager (DSM)
Medium6.5