Vendor
Synology
344 known vulnerabilities.
Products
DiskStation Manager (DSM) 99
Synology Router Manager (SRM) 43
Surveillance Station 25
Synology Photo Station 18
Synology DiskStation Manager (DSM) 13
Photo Station 12
Camera Firmware 9
Calendar 6
Unified Controller (DSMUC) 6
BeeDrive for desktop 6
Synology Drive Client 6
Media Server 5
Synology Calendar 5
Synology Active Backup for Business Agent 5
Note Station 4
Drive 4
Active Backup for Business 4
Synology SSL VPN Client 3
Download Station 3
Audio Station 3
Synology Chat Server 3
BeeStation OS (BSM) 3
Safe Access 3
Synology Download Station 3
Synology Video Station 2
Office 2
Application Service 2
Presto File Server 2
Synology Drive Server 2
File Station 2
SSL VPN Client 2
Chat 2
CardDAV Server 2
Hyper Backup 2
Synology Note Station Client 2
MailPlus Server 2
SSO Server 2
Synology Assistant 2
Synology Docker 1
VPN Plus Server 1
344 results · Feed
-
Low 3.5
An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability in Sharing API in Synology DiskStation Ma…
-
High 8.1
An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1…
-
High 8.8
An incorrect permission assignment for critical resource vulnerability in LDAP API in Synology DiskStation Manager (DSM…
-
Medium 5.3
An improper encoding or escaping of output vulnerability in Auth API in Synology DiskStation Manager (DSM) before 7.2.1…
-
Critical 9.8
An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2…
-
Critical 9.8CVE-2026-13684 Public exploit
An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-690…
-
Medium 6.5
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain…
-
Medium 4.3
A server-ide request forgery (SSRF) vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote a…
-
Critical 9.0
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain…
-
High 7.3
An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or w…
-
Medium 4.1
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository we…
-
Medium 4.3
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup Task function…
-
High 7.8
An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active B…
-
High 7.8
An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper Back…
-
Medium 5.9
A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2.2.4-703 allows…
-
Medium 6.2
A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager…
-
Medium 6.1
An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary…
-
Medium 6.1
An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local us…
-
High 8.6
A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files.
-
High 7.5
An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-…
-
Medium 6.1
Origin validation error vulnerability in Synology ActiveProtect Agent before 1.1.0-0439 allows local users to write arb…
-
Critical 9.8
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStat…
-
High 8.1
Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before …
-
Medium 5.4
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functiona…
-
Medium 5.9
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Safe Access in Sy…
-
Low 2.7
Incorrect authorization vulnerability in IO Module functionality in Synology Surveillance Station before 9.2.2-11575 an…
-
Medium 4.9
Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2…
-
Low 2.7
Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station bef…
-
Medium 4.9
Cleartext transmission of sensitive information vulnerability in Export Key functionality in Synology Surveillance Stat…
-
Medium 4.9
Missing authorization vulnerability in AddOns functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2…
-
Low 2.7
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Archiving Pull function…
-
Medium 6.8
Files or directories accessible to external parties vulnerability in redis-server component in Synology BeeDrive for de…
-
High 7.8
Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-1…
-
High 8.1
A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to…
-
Medium 6.5
A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows…
-
Medium 6.7
An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to rea…
-
Medium 5.6
Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local user…
-
High 7.8
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in BeeDrive in Synology Be…
-
High 7.5
Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows remote attac…
-
High 7.8
Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13…