Login Request a demo
SY
Vendor
Synology
92 products with CVEs on record
519
CVEs
5
On KEV
0
New 30D
Products
DM
Diskstation Manager
Synology
9.8
96 CVEs1 on KEV0 new
VF
Vs960hd Firmware
Synology
9.8
21 CVEs1 on KEV0 new
DM
Diskstation Manager Unified Controller
Synology
9.8
20 CVEs1 on KEV0 new
SF
Skynas Firmware
Synology
9.0
13 CVEs1 on KEV0 new
DS
Directory Server
Synology
6.5
4 CVEs1 on KEV0 new
RM
Router Manager
Synology
10.0
58 CVEs0 on KEV0 new
PS
Photo Station
Synology
9.8
33 CVEs0 on KEV0 new
DM
DiskStation Manager (DSM)
Synology
9.8
30 CVEs0 on KEV0 new
SS
Surveillance Station
Synology
9.9
25 CVEs0 on KEV0 new
SK
Skynas
Synology
9.8
15 CVEs0 on KEV0 new
CA
Calendar
Synology
9.8
11 CVEs0 on KEV0 new
BF
Bc500 Firmware
Synology
9.8
9 CVEs0 on KEV0 new
TF
Tc500 Firmware
Synology
9.8
9 CVEs0 on KEV0 new
AB
Active Backup For Business Agent
Synology
6.5
8 CVEs0 on KEV0 new
DS
Download Station
Synology
8.8
8 CVEs0 on KEV0 new
BE
Beedrive
Synology
7.8
6 CVEs0 on KEV0 new
BF
BeeDrive for desktop
Synology
7.8
6 CVEs0 on KEV0 new
DC
Drive Client
Synology
8.2
6 CVEs0 on KEV0 new
DS
Drive Server
Synology
7.5
6 CVEs0 on KEV0 new
MS
Media Server
Synology
9.8
6 CVEs0 on KEV0 new
VS
Video Station
Synology
9.1
6 CVEs0 on KEV0 new
DS
Dns Server
Synology
8.1
5 CVEs0 on KEV0 new
NS
Note Station
Synology
5.9
5 CVEs0 on KEV0 new
SV
Ssl Vpn Client
Synology
8.1
5 CVEs0 on KEV0 new
AS
Audio Station
Synology
9.8
4 CVEs0 on KEV0 new
BO
BeeStation OS
Synology
9.8
4 CVEs0 on KEV0 new
RS
Radius Server
Synology
8.1
4 CVEs0 on KEV0 new
SR
Synology Router Manager (SRM)
Synology
7.2
4 CVEs0 on KEV0 new
AS
Assistant
Synology
7.8
3 CVEs0 on KEV0 new
CS
Carddav Server
Synology
9.8
3 CVEs0 on KEV0 new
CH
Chat
Synology
6.5
3 CVEs0 on KEV0 new
FS
File Station
Synology
6.5
3 CVEs0 on KEV0 new
MS
Mailplus Server
Synology
7.5
3 CVEs0 on KEV0 new
OF
Office
Synology
7.8
3 CVEs0 on KEV0 new
SC
Synology Chat Server
Synology
9.0
3 CVEs0 on KEV0 new
UC
Unified Controller (DSMUC)
Synology
9.6
3 CVEs0 on KEV0 new
VD
Virtual Diskstation Manager
Synology
7.5
3 CVEs0 on KEV0 new
AS
Application Service
Synology
6.5
2 CVEs0 on KEV0 new
DS
Dsm
Synology
–
2 CVEs0 on KEV0 new
HB
Hyper Backup
Synology
4.3
2 CVEs0 on KEV0 new
MO
Moments
Synology
8.8
2 CVEs0 on KEV0 new
PF
Presto File Server
Synology
8.8
2 CVEs0 on KEV0 new
SA
Safeaccess
Synology
9.8
2 CVEs0 on KEV0 new
SS
SSO Server
Synology
6.1
2 CVEs0 on KEV0 new
SA
Synology Assistant
Synology
7.3
2 CVEs0 on KEV0 new
SN
Synology Note Station Client
Synology
5.9
2 CVEs0 on KEV0 new
SS
Synology SSL VPN Client
Synology
8.1
2 CVEs0 on KEV0 new
AB
Active Backup for Business
Synology
8.6
1 CVEs0 on KEV0 new
AB
Active Backup For Business Recovery Media Creator
Synology
7.8
1 CVEs0 on KEV0 new
AB
Active Backup For Microsoft 365
Synology
6.5
1 CVEs0 on KEV0 new
AA
ActiveProtect Agent
Synology
5.6
1 CVEs0 on KEV0 new
AE
Antivirus Essential
Synology
8.8
1 CVEs0 on KEV0 new
BE
Beephotos
Synology
9.8
1 CVEs0 on KEV0 new
CI
C2 Identity Edge Server
Synology
7.5
1 CVEs0 on KEV0 new
CF
Cc400w Firmware
Synology
9.8
1 CVEs0 on KEV0 new
CS
Cloud Station
Synology
–
1 CVEs0 on KEV0 new
CS
Cloud Station Backup
Synology
7.8
1 CVEs0 on KEV0 new
CS
Cloud Station Drive
Synology
7.8
1 CVEs0 on KEV0 new
CO
Contacts
Synology
5.4
1 CVEs0 on KEV0 new
DO
Docker
Synology
7.9
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-40539
DM
DiskStation Manager (DSM)
Synology
7.1
0%
Sep 18An improper certificate validation vulnerability in Email API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows man-in-the-middle…
CVE-2026-40538
DM
DiskStation Manager (DSM)
Synology
3.7
0%
Sep 18An improper restriction of excessive authentication attempts vulnerability in Auto block in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and…
CVE-2026-40535
DM
DiskStation Manager (DSM)
Synology
6.5
1%
Sep 18An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Desktop API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10,…
CVE-2026-40533
DM
DiskStation Manager (DSM)
Synology
5.3
0%
Sep 18An exposure of sensitive information through data queries vulnerability in Desktop API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2…
CVE-2026-40537
DM
DiskStation Manager (DSM)
Synology
4.3
0%
Sep 18A server-side request forgery (SSRF) vulnerability in PersonMail API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote…
CVE-2026-40536
DM
DiskStation Manager (DSM)
Synology
4.3
0%
Sep 18An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Audio API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10,…
CVE-2026-40534
DM
DiskStation Manager (DSM)
Synology
5.4
0%
Sep 18An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Video API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10,…
CVE-2026-40532
DM
DiskStation Manager (DSM)
Synology
6.5
0%
Sep 18A direct request ('forced browsing') vulnerability in Wallpaper Path in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote…
CVE-2026-40531
DM
DiskStation Manager (DSM)
Synology
4.3
0%
Sep 18An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote…
CVE-2026-4036
DM
DiskStation Manager (DSM)
Synology
6.5
0%
Sep 18An improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Sharing API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10,…
CVE-2026-40530
DM
DiskStation Manager (DSM)
Synology
8.0
0%
Sep 18An improper neutralization of CRLF sequences ('CRLF injection') vulnerability in User API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and…
CVE-2026-13683
DM
DiskStation Manager (DSM)
Synology
2.7
0%
Sep 18An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in EventScheduler API in Synology DiskStation Manager (DSM) before…
CVE-2026-13623
DM
DiskStation Manager (DSM)
Synology
4.8
0%
Sep 18An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Theme API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12,…
CVE-2026-13666
DM
DiskStation Manager (DSM)
Synology
3.5
0%
Sep 18An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability in Sharing API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9,…
CVE-2026-6205
DM
DiskStation Manager (DSM)
Synology
8.1
1%
Sep 18An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows…
CVE-2026-13673
DM
DiskStation Manager (DSM)
Synology
8.8
0%
Sep 18An incorrect permission assignment for critical resource vulnerability in LDAP API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and…
CVE-2026-13635
DM
DiskStation Manager (DSM)
Synology
5.3
0%
Sep 18An improper encoding or escaping of output vulnerability in Auth API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows…
CVE-2026-13639
DM
DiskStation Manager (DSM)
Synology
9.8
1%
Sep 18An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote…
CVE-2026-13684
DM
DiskStation Manager (DSM)
Synology
9.8
1%
Sep 18An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows…
CVE-2026-9548
SC
Synology Chat Server
Synology
6.5
0%
Aug 28An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote…
CVE-2026-9491
SC
Synology Chat Server
Synology
4.3
0%
Aug 28A server-ide request forgery (SSRF) vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote authenticated users to obtain non-sensitive information
CVE-2026-40541
SC
Synology Chat Server
Synology
9.0
0%
Aug 28An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote…
CVE-2026-4793
SA
Synology Assistant
Synology
7.3
0%
Aug 3An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-of-service during…
CVE-2024-47263
HB
Hyper Backup
Synology
4.1
0%
Jun 3An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository webapi component in Synology Hyper Backup before 4.1.2-4036…
CVE-2024-47273
HB
Hyper Backup
Synology
4.3
0%
Jun 3An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup Task functionality in Synology Hyper Backup before 4.1.2-4036 allows…
CVE-2022-49036
SA
Synology Active Backup for Business Recovery Media Creator
Synology
7.8
0%
Jun 3An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081…
CVE-2022-49042
SH
Synology Hyper Backup Explorer
Synology
7.8
0%
Jun 3An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper Backup Explorer before 3.0.1-0156 allows local users to execute…
CVE-2023-52951
SN
Synology Note Station Client
Synology
5.9
0%
Jun 3A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2.2.4-703 allows man-in-the-middle attackers to obtain user credential
CVE-2026-2237
SM
Storage Manager
Synology
5.5
0%
May 27A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local users on Windows to…
CVE-2025-66593
SA
Synology Assistant
Synology
5.6
0%
May 27An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary files with restricted content and conduct denial-of-service…
CVE-2025-66592
SA
Synology Active Backup for Business Agent
Synology
5.6
0%
May 27An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content and…
CVE-2025-30028
AB
Active Backup for Business
Synology
8.6
0%
May 27A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files
CVE-2025-14713
CI
C2 Identity Edge Server
Synology
7.5
0%
May 27An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from…
CVE-2025-13593
AA
ActiveProtect Agent
Synology
5.6
0%
May 27Origin validation error vulnerability in Synology ActiveProtect Agent before 1.1.0-0439 allows local users to write arbitrary files with restricted content and conduct…
CVE-2025-12686
BO
BeeStation OS
Synology
9.8
3%
May 27Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-65648 allows remote attackers to execute…
CVE-2025-13392
DM
DiskStation Manager (DSM)
Synology
9.8
1%
May 27Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7.2.2-72806-5 and 7.3.1-86003-1 (7.2.1-69057 is not…
CVE-2025-13167
SC
Synology Contacts
Synology
5.4
0%
May 27Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote…
CVE-2025-10466
SA
Safe Access
Synology
5.9
0%
May 27Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Safe Access in Synology Safe Access before 1.3.1-0329 allows remote…
CVE-2024-47272
SS
Surveillance Station
Synology
2.7
0%
May 27Incorrect authorization vulnerability in IO Module functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with…
CVE-2024-47271
SS
Surveillance Station
Synology
4.9
0%
May 27Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with…
CVE-2024-47270
SS
Surveillance Station
Synology
2.7
0%
May 27Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated…
CVE-2024-47269
SS
Surveillance Station
Synology
4.9
0%
May 27Cleartext transmission of sensitive information vulnerability in Export Key functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote…
CVE-2024-47268
SS
Surveillance Station
Synology
4.9
0%
May 27Missing authorization vulnerability in AddOns functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator…
CVE-2024-47267
SS
Surveillance Station
Synology
2.7
0%
May 27Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Archiving Pull functionality in Synology Surveillance Station before 9.2.2-11575…
CVE-2024-11399
BF
BeeDrive for desktop
Synology
6.8
0%
May 27Files or directories accessible to external parties vulnerability in redis-server component in Synology BeeDrive for desktop before 1.3.2-13814 allows local users to conduct…
CVE-2023-52945
BF
BeeDrive for desktop
Synology
7.8
0%
May 27Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-13814 allows local users to execute arbitrary code via…
CVE-2021-47961
SS
Synology SSL VPN Client
Synology
8.1
0%
Apr 10A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to insecure…
CVE-2021-47960
SS
Synology SSL VPN Client
Synology
6.5
0%
Apr 10A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the installation…
CVE-2026-3091
SP
Synology Presto Client
Synology
7.3
0%
Feb 24An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service…
CVE-2025-8074
BF
BeeDrive for desktop
Synology
5.6
0%
Dec 4Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information…
CVE-2025-54160
BF
BeeDrive for desktop
Synology
7.8
0%
Dec 4Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to…
CVE-2025-54159
BF
BeeDrive for desktop
Synology
7.5
0%
Dec 4Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows remote attackers to delete arbitrary files via unspecified vectors
CVE-2025-54158
BF
BeeDrive for desktop
Synology
7.8
0%
Dec 4Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via…
CVE-2025-2848
SM
Synology Mail Server
Synology
6.3
0%
Dec 4A vulnerability in Synology Mail Server allows remote authenticated attackers to read and write non-sensitive settings, and disable some non-critical functions
CVE-2025-29846
SR
Synology Router Manager (SRM)
Synology
7.2
1%
Dec 4A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages
CVE-2025-29845
SR
Synology Router Manager (SRM)
Synology
4.3
0%
Dec 4A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files
CVE-2025-29844
SR
Synology Router Manager (SRM)
Synology
4.3
0%
Dec 4A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information
CVE-2025-29843
SR
Synology Router Manager (SRM)
Synology
5.4
0%
Dec 4A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files
CVE-2024-5401
DM
DiskStation Manager (DSM)
Synology
8.8
0%
Dec 4Improper control of dynamically-managed code resources vulnerability in WebAPI component in Synology DiskStation Manager (DSM) before 7.1.1-42962-8 and 7.2.1-69057-2 and…
CVE-2024-45539
UC
Unified Controller (DSMUC)
Synology
7.5
0%
Dec 4Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller (DSMUC) before…