Known Vulnerabilities for Diskstation Manager by Synology
Listed below are 10 of the newest known vulnerabilities associated with "Diskstation Manager" by "Synology".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-40539 json | An improper certificate validation vulnerability in Email API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-40538 json | An improper restriction of excessive authentication attempts vulnerability in Auto block in Synology DiskStation Manager (DSM... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-40537 json | A server-side request forgery (SSRF) vulnerability in PersonMail API in Synology DiskStation Manager (DSM) before 7.2.1-69057... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-40536 json | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Audio API in Synology Disk... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-40535 json | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Desktop API in Synology Di... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-40534 json | An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Video API in Synolog... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-40533 json | An exposure of sensitive information through data queries vulnerability in Desktop API in Synology DiskStation Manager (DSM) ... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-40532 json | A direct request ('forced browsing') vulnerability in Wallpaper Path in Synology DiskStation Manager (DSM) before 7.2.1-69057... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-40531 json | An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager (DSM) before 7.2.1-69057-10... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-40530 json | An improper neutralization of CRLF sequences ('CRLF injection') vulnerability in User API in Synology DiskStation Manager (DS... | Not Provided | 2026-09-18 | 2026-09-18 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Synology | Diskstation Manager | 6.2.2-24922 | |||
| Application | Synology | Diskstation Manager | 6.2.1-23824-6 | |||
| Application | Synology | Diskstation Manager | 6.2.1-23824-5 | |||
| Application | Synology | Diskstation Manager | 6.2.1-23824-4 | |||
| Application | Synology | Diskstation Manager | 6.2.1-23824-3 | |||
| Application | Synology | Diskstation Manager | 6.2.1-23824-2 | |||
| Application | Synology | Diskstation Manager | 6.2.1-23824-1 | |||
| Application | Synology | Diskstation Manager | 6.2.1-23824 | |||
| Application | Synology | Diskstation Manager | 6.2.1 | |||
| Application | Synology | Diskstation Manager | 6.2-23739-2 | |||
| Application | Synology | Diskstation Manager | 6.2-23739-1 | |||
| Application | Synology | Diskstation Manager | 6.2-23739 | |||
| Application | Synology | Diskstation Manager | 6.2 | |||
| Application | Synology | Diskstation Manager | 6.1.7-15284-3 | |||
| Application | Synology | Diskstation Manager | 6.1.7-15284-2 | |||
| Application | Synology | Diskstation Manager | 6.1.7-15284-1 | |||
| Application | Synology | Diskstation Manager | 6.1.7-15284 | |||
| Application | Synology | Diskstation Manager | 6.1.6-15266 | |||
| Application | Synology | Diskstation Manager | 6.1.4-15217-5 | |||
| Application | Synology | Diskstation Manager | 6.1.4-15217-4 |