CVE-2026-74857

Synology DiskStation Manager: Mehrere Schwachstellen

Synology DiskStation Manager

A missing critical step in authentication vulnerability in the Auth API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks.

12. Nov 2026

Ausgewertete Quellen

• CERT-Bund
  WID-SEC-2026-4430
• NVD
  CVE-2026-74857