Diskstation Manager Unified Controller vulnerabilities

Product

Diskstation Manager Unified Controller

by Synology · last CVE Dec 4, 2025

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 4High 14Medium 2Low 0

Severity

Exploitation

Watch

Add Diskstation Manager Unified Controller to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-26563	6.7	1%	Feb 26	Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified… Affected: 3.0
CVE-2021-26565	5.9	1%	Feb 26	Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to obtain… Affected: 3.0