Synology vulnerabilities

CVEs per yearBy the year they were published

1. 20174
2. 20174
3. 20199
4. 201940
5. 201941
6. 202013
7. 202560
8. 202625
9. 202620
10. 202622
11. 202639
12. 202640

Newest CVEs

• CVE-2026-40539

  An improper certificate validation vulnerability in Email API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2…

  Synology · DiskStation Manager (DSM)

  High7.1
• CVE-2026-40538

  An improper restriction of excessive authentication attempts vulnerability in Auto block in Synology DiskStation Manager (DSM) before 7.2.1-69057-10,…

  Synology · DiskStation Manager (DSM)

  Low3.7
• CVE-2026-40535

  An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Desktop API in Synology DiskStation Manager (DSM) before…

  Synology · DiskStation Manager (DSM)

  Medium6.5
• CVE-2026-40533

  An exposure of sensitive information through data queries vulnerability in Desktop API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10,…

  Synology · DiskStation Manager (DSM)

  Medium5.3
• CVE-2026-40537

  A server-side request forgery (SSRF) vulnerability in PersonMail API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and…

  Synology · DiskStation Manager (DSM)

  Medium4.3
• CVE-2026-40536

  An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Audio API in Synology DiskStation Manager (DSM) before…

  Synology · DiskStation Manager (DSM)

  Medium4.3
• CVE-2026-40534

  An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Video API in Synology DiskStation Manager (DSM) before…

  Synology · DiskStation Manager (DSM)

  Medium5.4
• CVE-2026-40532

  A direct request ('forced browsing') vulnerability in Wallpaper Path in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and…

  Synology · DiskStation Manager (DSM)

  Medium6.5
• CVE-2026-40531

  An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2…

  Synology · DiskStation Manager (DSM)

  Medium4.3
• CVE-2026-4036

  An improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Sharing API in Synology DiskStation Manager (DSM)…

  Synology · DiskStation Manager (DSM)

  Medium6.5