// synology

[ENISA EUVD DB: SYNOLOGY]SOURCE: euvd.enisa.europa.eu

[2026-10-08] -> EUVD-2026-82777: Vulnerability report for Synology
An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to...
[2026-10-08] -> EUVD-2026-82772: Vulnerability report for Synology
An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write...
[2026-10-08] -> EUVD-2026-82774: Vulnerability report for Synology
An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and...
[2026-10-08] -> EUVD-2026-82775: Vulnerability report for Synology
An improper encoding or escaping of output vulnerability in Auth API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to obtain non-sensitive...