Medium · 4.3 CVE-2026-9491 EUVD-2026-67462GHSA-w5gw-c597-vxvj

A server-ide request forgery (SSRF) vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote authenticated users t…

Published Aug 28, 2026 · Updated Aug 28, 2026 · Assigned by synology

Vendor: Synology Product: Synology Chat Server

Description

A server-ide request forgery (SSRF) vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote authenticated users to obtain non-sensitive information.

Affected products

Vendor	Product	Affected	Fixed
Synology	Synology Chat Server	< 2.4.5-22148	2.4.5-22148

References

Synology-SA-26:10 Synology Chat Server vendor-advisory