Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-88266 EUVD-2026-124252GHSA-63hr-qc85-g274

An external control of system or configuration setting vulnerability in the synomount in Synology DiskStation Manager (DSM) before 7.3.2-86…

Published Nov 12, 2026 · Assigned by synology

Description

An external control of system or configuration setting vulnerability in the synomount in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write specific files.

Affected products

VendorProductAffectedFixed
Synology DiskStation Manager (DSM) 7.4.1 – < 7.4.1-90080-1, 7.3.2 – < 7.3.2-86009-5 7.4.1-90080-1

Advisories 1

References