Known Vulnerabilities for Download Station by Synology
Listed below are 8 of the newest known vulnerabilities associated with "Download Station" by "Synology".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-105036 json | EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop... | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-100855 json | AzuraCast before 0.23.6 contains a missing permission check vulnerability in the GET /api/station/{station_id}/file/{id}/play... | Not Provided | 2026-09-27 | 2026-10-08 |
| CVE-2026-100853 json | In AzuraCast before 0.23.8, the public On-Demand download endpoint fails to verify playlist-level access controls, allowing u... | Not Provided | 2026-09-27 | 2026-09-28 |
| CVE-2026-39993 json | A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user accou... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-39989 json | A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station. If a remote attacker gains a... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-34014 json | An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station. If a loc... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2021-34811 json | Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.16-3566... | 4.3 - MEDIUM | 2021-06-18 | 2021-06-23 |
| CVE-2021-34810 json | Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote au... | 8.8 - HIGH | 2021-06-18 | 2021-06-24 |
| CVE-2021-34809 json | Improper neutralization of special elements used in a command ('Command Injection') vulnerability in task management componen... | 8.8 - HIGH | 2021-06-18 | 2021-06-24 |
| CVE-2021-33184 json | Server-Side request forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.15-3563... | 7.7 - HIGH | 2021-06-01 | 2021-06-10 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Synology | Download Station | 3.8.4-3468 | |||
| Application | Synology | Download Station | 3.8.3-3458 | |||
| Application | Synology | Download Station | 3.8.2-3455 | |||
| Application | Synology | Download Station | 3.8.1-3420 | |||
| Application | Synology | Download Station | 3.8.0-3416 | |||
| Application | Synology | Download Station | 3.5-2982 | |||
| Application | Synology | Download Station | 3.5-2980 | |||
| Application | Synology | Download Station | 3.5-2973 | |||
| Application | Synology | Download Station | 3.5-2970 | |||
| Application | Synology | Download Station | 3.5-2968 | |||
| Application | Synology | Download Station | 3.5-2967 | |||
| Application | Synology | Download Station | 3.5-2962 | |||
| Application | Synology | Download Station | 3.5-2956 | |||
| Application | Synology | Download Station | 3.5-2955 | |||
| Application | Synology | Download Station | 3.5-2706 | |||
| Application | Synology | Download Station | 3.5-2705 | |||
| Application | Synology | Download Station | 3.5-2638 | |||
| Application | Synology | Download Station | 3.4-2558 | |||
| Application | Synology | Download Station | 3.4-2557 | |||
| Application | Synology | Download Station | 3.4-2555 |