Known Vulnerabilities for Storage Manager by Synology
Listed below are 1 of the newest known vulnerabilities associated with "Storage Manager" by "Synology".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-117962 json | Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixed in ... | Not Provided | 2026-10-27 | 2026-11-05 |
| CVE-2026-116250 json | In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with check_access_permission() a... | Not Provided | 2026-10-30 | 2026-11-06 |
| CVE-2026-110235 json | MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extraction ... | Not Provided | 2026-10-13 | 2026-10-13 |
| CVE-2026-108728 json | Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain... | Not Provided | 2026-10-11 | 2026-10-18 |
| CVE-2026-107018 json | Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read and wr... | Not Provided | 2026-10-29 | 2026-11-03 |
| CVE-2026-104110 json | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.24.0, File... | Not Provided | 2026-10-14 | 2026-10-15 |
| CVE-2026-104109 json | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, File... | Not Provided | 2026-10-14 | 2026-10-29 |
| CVE-2026-104107 json | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In FileRise 3.22.0, t... | Not Provided | 2026-10-14 | 2026-10-15 |
| CVE-2026-103474 json | yii2-starter-kit through 4.2.0 fails to validate file types in the backend storage upload actions, allowing authenticated man... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-100798 json | Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, ... | Not Provided | 2026-09-29 | 2026-10-01 |