{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/diskstation-manager--7.3.2-86009-5--7.4.1-90080-1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:synology:diskstation_manager:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-75785"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["DiskStation Manager (\u003c 7.3.2-86009-5, \u003c 7.4.1-90080-1)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Synology"],"content_html":"\u003cp\u003eSynology DiskStation Manager (DSM) contains an improper neutralization of special elements used in an OS command vulnerability within its VPN API (CVE-2026-75785).\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows remote authenticated users with administrator privileges to read or write arbitrary files and conduct denial-of-service attacks.\u003c/p\u003e\n","date_modified":"2026-11-12T10:13:20Z","date_published":"2026-11-12T10:13:20Z","id":"https://feed.craftedsignal.io/briefs/2026-11-synology-dsm-vpn-api-cve-2026-75785/","summary":"CVE-2026-75785 is an improper neutralization of special elements used in an OS command vulnerability in the Synology DiskStation Manager (DSM) VPN API that allows remote authenticated administrators to read or write arbitrary files and conduct denial-of-service attacks.","title":"Synology DiskStation Manager: OS command injection in VPN API (CVE-2026-75785)","url":"https://feed.craftedsignal.io/briefs/2026-11-synology-dsm-vpn-api-cve-2026-75785/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:synology:diskstation_manager:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.1,"id":"CVE-2026-81584"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["DiskStation Manager (\u003c 7.3.2-86009-5, \u003c 7.4.1-90080-1)","DiskStation Manager (\u003c 7.4.1-90080-1, \u003c 7.3.2-86009-5)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Synology"],"content_html":"\u003cp\u003eCVE-2026-81584 describes an improper neutralization of special elements used in an SQL command within the User API of Synology DiskStation Manager (DSM). The vulnerability is exploitable by an attacker who has already gained control over an integrated LDAP or Active Directory server used by the DSM instance. Successful exploitation allows for arbitrary file read and write operations, as well as denial-of-service attacks against the Synology appliance.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eExploitation can lead to unauthorized data access, system modification, or denial-of-service. The CVSS v3.1 base score for this vulnerability is 8.1.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Synology DSM version 7.3.2-86009-5 or 7.4.1-90080-1 or later to remediate this vulnerability.\u003c/li\u003e\n\u003cli\u003eEnsure that integrated LDAP and Active Directory infrastructure is hardened and monitored, as compromise of these services is a prerequisite for exploiting this vulnerability.\u003c/li\u003e\n\u003cli\u003eMonitor DSM access logs and system resource utilization for signs of unauthorized API access or unexpected service interruptions.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-12T09:31:11Z","date_published":"2026-11-12T09:31:11Z","id":"https://feed.craftedsignal.io/briefs/2026-11-synology-dsm-sqli-cve-2026-81584/","summary":"An SQL injection vulnerability in the Synology DiskStation Manager (DSM) User API, tracked as CVE-2026-81584, allows remote attackers who have compromised an integrated LDAP or Active Directory server to perform arbitrary file operations or trigger a denial-of-service.","title":"Synology DiskStation Manager: SQL Injection in User API (CVE-2026-81584)","url":"https://feed.craftedsignal.io/briefs/2026-11-synology-dsm-sqli-cve-2026-81584/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:synology:diskstation_manager:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-74857"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["DiskStation Manager (\u003c 7.3.2-86009-5, \u003c 7.4.1-90080-1)"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Synology"],"content_html":"\u003cp\u003eCVE-2026-74857 is a vulnerability in the Auth API component of Synology DiskStation Manager (DSM). The flaw involves a missing critical authentication step, which allows remote authenticated users to read or write arbitrary files on the system or conduct denial-of-service attacks.\u003c/p\u003e\n","date_modified":"2026-11-12T09:30:53Z","date_published":"2026-11-12T09:30:53Z","id":"https://feed.craftedsignal.io/briefs/2026-11-synology-dsm-auth-bypass-cve-2026-74857/","summary":"A missing authentication step in the Synology DiskStation Manager Auth API (CVE-2026-74857) allows a remote authenticated user to perform unauthorized arbitrary file operations and denial-of-service.","title":"Synology DiskStation Manager: Auth API missing authentication (CVE-2026-74857)","url":"https://feed.craftedsignal.io/briefs/2026-11-synology-dsm-auth-bypass-cve-2026-74857/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:synology:diskstation_manager:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-18633"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["DiskStation Manager (\u003c 7.3.2-86009-5, \u003c 7.4.1-90080-1)"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Synology"],"content_html":"\u003cp\u003eSynology DiskStation Manager (DSM) contains an access of uninitialized pointer vulnerability in the nfsd component. This vulnerability, identified as CVE-2026-18633, can be exploited by a remote attacker to cause a denial-of-service (DoS) condition on the affected device. The vulnerability has a CVSS v3.1 base score of 7.5.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a remote attacker to disrupt system availability by triggering a denial-of-service condition via the nfsd service.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eReview vendor security advisories for updates addressing CVE-2026-18633.\u003c/p\u003e\n","date_modified":"2026-11-12T09:30:32Z","date_published":"2026-11-12T09:30:32Z","id":"https://feed.craftedsignal.io/briefs/2026-11-synology-dsm-nfsd-dos-cve-2026-18633/","summary":"An access of uninitialized pointer vulnerability in the nfsd component of Synology DiskStation Manager (DSM) allows remote attackers to conduct denial-of-service attacks.","title":"Synology DiskStation Manager: Denial-of-service via nfsd (CVE-2026-18633)","url":"https://feed.craftedsignal.io/briefs/2026-11-synology-dsm-nfsd-dos-cve-2026-18633/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:synology:diskstation_manager:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-13672"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["DiskStation Manager (\u003c 7.3.2-86009-5, \u003c 7.4.1-90080-1)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Synology"],"content_html":"\u003cp\u003eCVE-2026-13672 is an authorization bypass vulnerability in the SSOAuth component of Synology DiskStation Manager (DSM). The flaw, which has a CVSS v3.1 base score of 8.8, involves a user-controlled key vulnerability that allows remote authenticated users to read or write arbitrary files and perform denial-of-service attacks on the affected device.\u003c/p\u003e\n","date_modified":"2026-11-12T09:30:22Z","date_published":"2026-11-12T09:30:22Z","id":"https://feed.craftedsignal.io/briefs/2026-11-synology-dsm-ssoauth-cve-2026-13672/","summary":"An authorization bypass vulnerability in the SSOAuth component of Synology DiskStation Manager (DSM) allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks.","title":"Synology DiskStation Manager: Authorization Bypass in SSOAuth","url":"https://feed.craftedsignal.io/briefs/2026-11-synology-dsm-ssoauth-cve-2026-13672/"}],"language":"en","title":"CraftedSignal Threat Feed - DiskStation Manager (\u003c 7.3.2-86009-5, \u003c 7.4.1-90080-1)","version":"https://jsonfeed.org/version/1.1"}