Product · Synology

DiskStation Manager (DSM)

99 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Critical 9.8

CVE-2026-76954 Public exploit

An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology DiskSta…

Synology DiskStation Manager (DSM)

Nov 12, 2026
Critical 9.8

CVE-2026-13684 Public exploit

An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-690…

Synology DiskStation Manager (DSM)

Sep 18, 2026
Medium 5.3

CVE-2024-50629 Public exploit EPSS 35%

Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.…

Synology DiskStation Manager (DSM) BeeStation OS (BSM)

Mar 19, 2025
Critical 9.8

CVE-2024-10441 Public exploit

Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) befor…

Synology DiskStation Manager (DSM) BeeStation OS (BSM)

Mar 19, 2025
Unscored —

CVE-2017-15889 Public exploit EPSS 74%

Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote auth…

Synology DiskStation Manager (DSM)

Dec 4, 2017