Medium · 6.2 CVE-2026-2237 EUVD-2026-32153GHSA-5v68-527q-prqv

A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.…

Published May 27, 2026 · Updated Jun 2, 2026 · Assigned by synology

Vendor: Synology Product: Storage Manager

Description

A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local users on Windows to obtain sensitive information.

Affected products

Vendor	Product	Affected	Fixed
Synology	Storage Manager	< 1.0.1-1100	1.0.1-1100

References

Synology-SA-26:01 Storage Manager vendor-advisory