{"schema_version":1,"title":"Synology vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 52 vulnerabilities in Synology: 0 in the last 7 days and 22 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-6205, was published on 18 September 2026. 5 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/synology","json_url":"https://junglewise.ai/threats/vendors/synology.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/synology","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":14,"all_time":52,"critical":4,"exploited":0,"last_7_days":0,"last_30_days":22,"last_90_days":22,"last_365_days":52},"latest":[{"cve":"CVE-2026-6205","cvss":8.1,"epss":0.0052,"slug":"cve-2026-6205-synology-diskstation-manager-external-control-of-file-name-or-path","title":"Synology DiskStation Manager external control of file name or path in Upload API","severity":"high","exploited":false,"published_at":"2026-09-18T09:16:42.133+00:00","url":"https://junglewise.ai/threats/cve-2026-6205-synology-diskstation-manager-external-control-of-file-name-or-path"},{"cve":"CVE-2026-4036","cvss":6.5,"epss":0.0045,"slug":"cve-2026-4036-synology-diskstation-manager-sql-injection-in-sharing-api","title":"Synology DiskStation Manager SQL injection in Sharing API","severity":"medium","exploited":false,"published_at":"2026-09-18T09:16:41.547+00:00","url":"https://junglewise.ai/threats/cve-2026-4036-synology-diskstation-manager-sql-injection-in-sharing-api"},{"cve":"CVE-2026-40539","cvss":7.1,"epss":0.0012,"slug":"cve-2026-40539-synology-diskstation-manager-improper-certificate-validation-in","title":"Synology DiskStation Manager improper certificate validation in Email API","severity":"high","exploited":false,"published_at":"2026-09-18T09:16:41.423+00:00","url":"https://junglewise.ai/threats/cve-2026-40539-synology-diskstation-manager-improper-certificate-validation-in"},{"cve":"CVE-2026-40538","cvss":3.7,"epss":0.0037,"slug":"cve-2026-40538-synology-diskstation-manager-brute-force-attack-via-insufficient","title":"Synology DiskStation Manager brute-force attack via insufficient rate limiting","severity":"low","exploited":false,"published_at":"2026-09-18T09:16:41.307+00:00","url":"https://junglewise.ai/threats/cve-2026-40538-synology-diskstation-manager-brute-force-attack-via-insufficient"},{"cve":"CVE-2026-40537","cvss":4.3,"epss":0.0033,"slug":"cve-2026-40537-synology-diskstation-manager-ssrf-in-personmail-api","title":"Synology DiskStation Manager SSRF in PersonMail API","severity":"medium","exploited":false,"published_at":"2026-09-18T09:16:41.19+00:00","url":"https://junglewise.ai/threats/cve-2026-40537-synology-diskstation-manager-ssrf-in-personmail-api"},{"cve":"CVE-2026-40536","cvss":4.3,"epss":0.0042,"slug":"cve-2026-40536-synology-diskstation-manager-path-traversal-in-audio-api","title":"Synology DiskStation Manager path traversal in Audio API","severity":"medium","exploited":false,"published_at":"2026-09-18T09:16:41.077+00:00","url":"https://junglewise.ai/threats/cve-2026-40536-synology-diskstation-manager-path-traversal-in-audio-api"},{"cve":"CVE-2026-40535","cvss":6.5,"epss":0.005,"slug":"cve-2026-40535-synology-diskstation-manager-path-traversal-in-desktop-api","title":"Synology DiskStation Manager path traversal in Desktop API","severity":"medium","exploited":false,"published_at":"2026-09-18T09:16:40.96+00:00","url":"https://junglewise.ai/threats/cve-2026-40535-synology-diskstation-manager-path-traversal-in-desktop-api"},{"cve":"CVE-2026-40534","cvss":5.4,"epss":0.0027,"slug":"cve-2026-40534-synology-diskstation-manager-cross-site-scripting-in-video-api","title":"Synology DiskStation Manager cross-site scripting in Video API","severity":"medium","exploited":false,"published_at":"2026-09-18T09:16:40.84+00:00","url":"https://junglewise.ai/threats/cve-2026-40534-synology-diskstation-manager-cross-site-scripting-in-video-api"},{"cve":"CVE-2026-40533","cvss":5.3,"epss":0.0038,"slug":"cve-2026-40533-synology-diskstation-manager-information-disclosure-in-desktop","title":"Synology DiskStation Manager information disclosure in Desktop API","severity":"medium","exploited":false,"published_at":"2026-09-18T09:16:40.627+00:00","url":"https://junglewise.ai/threats/cve-2026-40533-synology-diskstation-manager-information-disclosure-in-desktop"},{"cve":"CVE-2026-40532","cvss":6.5,"epss":0.0042,"slug":"cve-2026-40532-synology-diskstation-manager-forced-browsing-in-wallpaper-path","title":"Synology DiskStation Manager forced browsing in Wallpaper Path","severity":"medium","exploited":false,"published_at":"2026-09-18T09:16:40.473+00:00","url":"https://junglewise.ai/threats/cve-2026-40532-synology-diskstation-manager-forced-browsing-in-wallpaper-path"},{"cve":"CVE-2026-40531","cvss":4.3,"epss":0.0044,"slug":"cve-2026-40531-synology-diskstation-manager-integer-overflow-in-file-operation","title":"Synology DiskStation Manager integer overflow in File Operation","severity":"medium","exploited":false,"published_at":"2026-09-18T09:16:40.357+00:00","url":"https://junglewise.ai/threats/cve-2026-40531-synology-diskstation-manager-integer-overflow-in-file-operation"},{"cve":"CVE-2026-40530","cvss":8,"epss":0.0049,"slug":"cve-2026-40530-synology-diskstation-manager-crlf-injection-in-user-api","title":"Synology DiskStation Manager CRLF injection in User API","severity":"high","exploited":false,"published_at":"2026-09-18T09:16:40.237+00:00","url":"https://junglewise.ai/threats/cve-2026-40530-synology-diskstation-manager-crlf-injection-in-user-api"},{"cve":"CVE-2026-13684","cvss":9.8,"epss":0.006,"slug":"cve-2026-13684-synology-diskstation-manager-improper-encoding-in-scgi","title":"Synology DiskStation Manager improper encoding in SCGI","severity":"critical","exploited":false,"published_at":"2026-09-18T09:16:39.237+00:00","url":"https://junglewise.ai/threats/cve-2026-13684-synology-diskstation-manager-improper-encoding-in-scgi"},{"cve":"CVE-2026-13683","cvss":2.7,"epss":0.0032,"slug":"cve-2026-13683-synology-diskstation-manager-sql-injection-in-eventscheduler-api","title":"Synology DiskStation Manager SQL injection in EventScheduler API","severity":"low","exploited":false,"published_at":"2026-09-18T09:16:39.117+00:00","url":"https://junglewise.ai/threats/cve-2026-13683-synology-diskstation-manager-sql-injection-in-eventscheduler-api"},{"cve":"CVE-2026-13673","cvss":8.8,"epss":0.0039,"slug":"cve-2026-13673-synology-diskstation-manager-incorrect-permission-assignment-in","title":"Synology DiskStation Manager incorrect permission assignment in LDAP API","severity":"high","exploited":false,"published_at":"2026-09-18T09:16:38.997+00:00","url":"https://junglewise.ai/threats/cve-2026-13673-synology-diskstation-manager-incorrect-permission-assignment-in"},{"cve":"CVE-2026-13666","cvss":3.5,"epss":0.0025,"slug":"cve-2026-13666-synology-diskstation-manager-crlf-injection-in-sharing-api","title":"Synology DiskStation Manager CRLF injection in Sharing API","severity":"low","exploited":false,"published_at":"2026-09-18T09:16:38.877+00:00","url":"https://junglewise.ai/threats/cve-2026-13666-synology-diskstation-manager-crlf-injection-in-sharing-api"},{"cve":"CVE-2026-13639","cvss":9.8,"epss":0.0067,"slug":"cve-2026-13639-synology-diskstation-manager-insufficient-entropy-in-login-logic","title":"Synology DiskStation Manager insufficient entropy in login logic","severity":"critical","exploited":false,"published_at":"2026-09-18T09:16:38.757+00:00","url":"https://junglewise.ai/threats/cve-2026-13639-synology-diskstation-manager-insufficient-entropy-in-login-logic"},{"cve":"CVE-2026-13635","cvss":5.3,"epss":0.0034,"slug":"cve-2026-13635-synology-diskstation-manager-improper-encoding-in-auth-api","title":"Synology DiskStation Manager improper encoding in Auth API","severity":"medium","exploited":false,"published_at":"2026-09-18T09:16:38.637+00:00","url":"https://junglewise.ai/threats/cve-2026-13635-synology-diskstation-manager-improper-encoding-in-auth-api"},{"cve":"CVE-2026-13623","cvss":4.8,"epss":0.0025,"slug":"cve-2026-13623-synology-diskstation-manager-cross-site-scripting-in-theme-api","title":"Synology DiskStation Manager cross-site scripting in Theme API","severity":"medium","exploited":false,"published_at":"2026-09-18T09:16:38.5+00:00","url":"https://junglewise.ai/threats/cve-2026-13623-synology-diskstation-manager-cross-site-scripting-in-theme-api"},{"cve":"CVE-2026-9548","cvss":6.5,"epss":0.0027,"slug":"cve-2026-9548-synology-chat-server-xss-in-extract-domain","title":"Synology Chat Server XSS in extract domain","severity":"medium","exploited":false,"published_at":"2026-08-28T08:16:59.063+00:00","url":"https://junglewise.ai/threats/cve-2026-9548-synology-chat-server-xss-in-extract-domain"},{"cve":"CVE-2026-9491","cvss":4.3,"epss":0.0036,"slug":"cve-2026-9491-synology-chat-server-ssrf-in-webhook","title":"Synology Chat Server SSRF in webhook","severity":"medium","exploited":false,"published_at":"2026-08-28T08:16:58.953+00:00","url":"https://junglewise.ai/threats/cve-2026-9491-synology-chat-server-ssrf-in-webhook"},{"cve":"CVE-2026-40541","cvss":9,"epss":0.0049,"slug":"cve-2026-40541-synology-chat-server-cross-site-scripting-in-domain-extraction","title":"Synology Chat Server cross-site scripting in domain extraction","severity":"critical","exploited":false,"published_at":"2026-08-28T08:16:40.713+00:00","url":"https://junglewise.ai/threats/cve-2026-40541-synology-chat-server-cross-site-scripting-in-domain-extraction"},{"cve":"CVE-2024-47273","cvss":4.3,"slug":"cve-2024-47273-synology-hyper-backup-path-traversal-in-backup-task","title":"Synology Hyper Backup path traversal in Backup Task","severity":"medium","exploited":false,"published_at":"2026-06-03T14:16:26.4+00:00","url":"https://junglewise.ai/threats/cve-2024-47273-synology-hyper-backup-path-traversal-in-backup-task"},{"cve":"CVE-2024-47263","cvss":4.1,"slug":"cve-2024-47263-synology-hyper-backup-path-traversal-in-backup-repository-webapi","title":"Synology Hyper Backup path traversal in Backup.Repository webapi","severity":"medium","exploited":false,"published_at":"2026-06-03T14:16:26.25+00:00","url":"https://junglewise.ai/threats/cve-2024-47263-synology-hyper-backup-path-traversal-in-backup-repository-webapi"},{"cve":"CVE-2023-52951","cvss":5.9,"slug":"cve-2023-52951-synology-note-station-client-cleartext-transmission-of","title":"Synology Note Station Client cleartext transmission of credentials","severity":"medium","exploited":false,"published_at":"2026-06-03T14:16:25.87+00:00","url":"https://junglewise.ai/threats/cve-2023-52951-synology-note-station-client-cleartext-transmission-of"}],"vendor":{"hub":true,"name":"Synology","slug":"synology","homepage":"https://www.synology.com/","description":"Synology is a Taiwanese corporation that specializes in network-attached storage (NAS) appliances.","url":"https://junglewise.ai/threats/vendors/synology"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":1,"exploited":0,"vulnerabilities":3},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":2,"exploited":0,"vulnerabilities":19},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-13639","cvss":9.8,"epss":0.0067,"slug":"cve-2026-13639-synology-diskstation-manager-insufficient-entropy-in-login-logic","title":"Synology DiskStation Manager insufficient entropy in login logic","severity":"critical","exploited":false,"published_at":"2026-09-18T09:16:38.757+00:00","url":"https://junglewise.ai/threats/cve-2026-13639-synology-diskstation-manager-insufficient-entropy-in-login-logic"},{"cve":"CVE-2026-13684","cvss":9.8,"epss":0.006,"slug":"cve-2026-13684-synology-diskstation-manager-improper-encoding-in-scgi","title":"Synology DiskStation Manager improper encoding in SCGI","severity":"critical","exploited":false,"published_at":"2026-09-18T09:16:39.237+00:00","url":"https://junglewise.ai/threats/cve-2026-13684-synology-diskstation-manager-improper-encoding-in-scgi"},{"cve":"CVE-2025-12686","cvss":9.8,"slug":"cve-2025-12686-synology-beestation-buffer-overflow-in-admincenter","title":"Synology BeeStation buffer overflow in AdminCenter","severity":"critical","exploited":false,"published_at":"2026-05-27T09:16:26.357+00:00","url":"https://junglewise.ai/threats/cve-2025-12686-synology-beestation-buffer-overflow-in-admincenter"},{"cve":"CVE-2026-40541","cvss":9,"epss":0.0049,"slug":"cve-2026-40541-synology-chat-server-cross-site-scripting-in-domain-extraction","title":"Synology Chat Server cross-site scripting in domain extraction","severity":"critical","exploited":false,"published_at":"2026-08-28T08:16:40.713+00:00","url":"https://junglewise.ai/threats/cve-2026-40541-synology-chat-server-cross-site-scripting-in-domain-extraction"},{"cve":"CVE-2026-13673","cvss":8.8,"epss":0.0039,"slug":"cve-2026-13673-synology-diskstation-manager-incorrect-permission-assignment-in","title":"Synology DiskStation Manager incorrect permission assignment in LDAP API","severity":"high","exploited":false,"published_at":"2026-09-18T09:16:38.997+00:00","url":"https://junglewise.ai/threats/cve-2026-13673-synology-diskstation-manager-incorrect-permission-assignment-in"},{"cve":"CVE-2025-30028","cvss":8.6,"slug":"cve-2025-30028-synology-active-backup-for-business-sql-injection-arbitrary-file","title":"Synology Active Backup for Business SQL injection arbitrary file read","severity":"high","exploited":false,"published_at":"2026-05-27T09:16:27.37+00:00","url":"https://junglewise.ai/threats/cve-2025-30028-synology-active-backup-for-business-sql-injection-arbitrary-file"},{"cve":"CVE-2026-6205","cvss":8.1,"epss":0.0052,"slug":"cve-2026-6205-synology-diskstation-manager-external-control-of-file-name-or-path","title":"Synology DiskStation Manager external control of file name or path in Upload API","severity":"high","exploited":false,"published_at":"2026-09-18T09:16:42.133+00:00","url":"https://junglewise.ai/threats/cve-2026-6205-synology-diskstation-manager-external-control-of-file-name-or-path"},{"cve":"CVE-2021-47961","cvss":8.1,"epss":0.0005,"slug":"cve-2021-47961-synology-ssl-vpn-client-plaintext-storage-of-pin-code","title":"Synology SSL VPN Client plaintext storage of PIN code","severity":"high","exploited":false,"published_at":"2026-04-10T10:16:03.913+00:00","url":"https://junglewise.ai/threats/cve-2021-47961-synology-ssl-vpn-client-plaintext-storage-of-pin-code"},{"cve":"CVE-2025-13392","cvss":8.1,"slug":"cve-2025-13392-synology-dsm-authentication-bypass-in-sso","title":"Synology DSM authentication bypass in SSO","severity":"high","exploited":false,"published_at":"2026-05-27T09:16:26.607+00:00","url":"https://junglewise.ai/threats/cve-2025-13392-synology-dsm-authentication-bypass-in-sso"},{"cve":"CVE-2026-40530","cvss":8,"epss":0.0049,"slug":"cve-2026-40530-synology-diskstation-manager-crlf-injection-in-user-api","title":"Synology DiskStation Manager CRLF injection in User API","severity":"high","exploited":false,"published_at":"2026-09-18T09:16:40.237+00:00","url":"https://junglewise.ai/threats/cve-2026-40530-synology-diskstation-manager-crlf-injection-in-user-api"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Synology DiskStation Manager","slug":"diskstation-manager","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/diskstation-manager"},{"name":"Synology BeeDrive","slug":"beedrive","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/beedrive"},{"name":"Synology Surveillance Station","slug":"surveillance-station","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/surveillance-station"},{"name":"Synology DiskStation Manager (DSM)","slug":"diskstation-manager-dsm","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/diskstation-manager-dsm"},{"name":"Synology Chat Server","slug":"chat-server","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/chat-server"}]}