Known Vulnerabilities for products from Synology
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Synology".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by Synology can be found at device.report : Synology
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-100572 json | Not Provided | 2026-09-26 | 2026-09-26 | |
| CVE-2026-100555 json | Not Provided | 2026-09-26 | 2026-09-26 | |
| CVE-2026-40541 json | Not Provided | 2026-08-28 | 2026-08-28 | |
| CVE-2026-40539 json | Not Provided | 2026-09-18 | 2026-09-18 | |
| CVE-2026-40538 json | Not Provided | 2026-09-18 | 2026-09-18 | |
| CVE-2026-40537 json | Not Provided | 2026-09-18 | 2026-09-18 | |
| CVE-2026-40536 json | Not Provided | 2026-09-18 | 2026-09-18 | |
| CVE-2026-40535 json | Not Provided | 2026-09-18 | 2026-09-18 | |
| CVE-2026-40534 json | Not Provided | 2026-09-18 | 2026-09-18 | |
| CVE-2026-40533 json | Not Provided | 2026-09-18 | 2026-09-18 | |
| CVE-2026-4793 json | An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write a... | Not Provided | 2026-08-03 | 2026-08-21 |
| CVE-2026-3091 json | An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or w... | Not Provided | 2026-02-24 | 2026-06-02 |
| CVE-2026-2237 json | A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager packa... | Not Provided | 2026-05-27 | 2026-06-02 |
| CVE-2025-66593 json | An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary files... | Not Provided | 2026-05-27 | 2026-09-30 |
| CVE-2025-66592 json | An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to... | Not Provided | 2026-05-27 | 2026-09-30 |
| CVE-2025-54160 json | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in BeeDrive in Synology BeeDrive... | Not Provided | 2025-12-04 | 2026-09-25 |
| CVE-2025-54159 json | Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows remote attackers t... | Not Provided | 2025-12-04 | 2026-09-25 |
| CVE-2025-54158 json | Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 al... | Not Provided | 2025-12-04 | 2026-09-25 |
| CVE-2025-30028 json | A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files. | Not Provided | 2026-05-27 | 2026-09-30 |
| CVE-2025-29846 json | A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages. | Not Provided | 2025-12-04 | 2026-09-25 |
Known software with vulnerabilities from Synology
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Synology | Application Service | 1.0.0-0022 |
| Application | Synology | Assistant | 2.2-1062 |
| Application | Synology | Audio Station | 4.0-2307 |
| Application | Synology | Calendar | 1.0.0-0121 |
| Application | Synology | Carddav Server | 5.2.0-0019 |
| Application | Synology | Chat | 1.0.0-0126 |
| Application | Synology | Cloud Station | 1.1-2291 |
| Application | Synology | Cloud Station Backup | 4.0-4203 |
| Application | Synology | Cloud Station Drive | 1.0-2197 |
| Application | Synology | Directory Server | - |
| Application | Synology | Diskstation Manager | - |
| Application | Synology | Dns Server | 1.0-0017 |
| Application | Synology | Download Station | 3.2-2295 |
| Application | Synology | Drive | 1.0.0-10240 |
| Hardware | Synology | Ds107 | - |
| Operating System | Synology | Ds107 Firmware | 3.1-1594 |
| Hardware | Synology | Ds116 | - |
| Operating System | Synology | Ds116 Firmware | 5.2-5644-1 |
| Hardware | Synology | Ds213 | - |
| Operating System | Synology | Ds213 Firmware | 4.0-2243 |