{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/diskstation-manager--7.4.1-90080-1--7.3.2-86009-5/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:synology:diskstation_manager:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.1,"id":"CVE-2026-81584"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["DiskStation Manager (\u003c 7.3.2-86009-5, \u003c 7.4.1-90080-1)","DiskStation Manager (\u003c 7.4.1-90080-1, \u003c 7.3.2-86009-5)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Synology"],"content_html":"\u003cp\u003eCVE-2026-81584 describes an improper neutralization of special elements used in an SQL command within the User API of Synology DiskStation Manager (DSM). The vulnerability is exploitable by an attacker who has already gained control over an integrated LDAP or Active Directory server used by the DSM instance. Successful exploitation allows for arbitrary file read and write operations, as well as denial-of-service attacks against the Synology appliance.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eExploitation can lead to unauthorized data access, system modification, or denial-of-service. The CVSS v3.1 base score for this vulnerability is 8.1.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Synology DSM version 7.3.2-86009-5 or 7.4.1-90080-1 or later to remediate this vulnerability.\u003c/li\u003e\n\u003cli\u003eEnsure that integrated LDAP and Active Directory infrastructure is hardened and monitored, as compromise of these services is a prerequisite for exploiting this vulnerability.\u003c/li\u003e\n\u003cli\u003eMonitor DSM access logs and system resource utilization for signs of unauthorized API access or unexpected service interruptions.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-12T09:31:11Z","date_published":"2026-11-12T09:31:11Z","id":"https://feed.craftedsignal.io/briefs/2026-11-synology-dsm-sqli-cve-2026-81584/","summary":"An SQL injection vulnerability in the Synology DiskStation Manager (DSM) User API, tracked as CVE-2026-81584, allows remote attackers who have compromised an integrated LDAP or Active Directory server to perform arbitrary file operations or trigger a denial-of-service.","title":"Synology DiskStation Manager: SQL Injection in User API (CVE-2026-81584)","url":"https://feed.craftedsignal.io/briefs/2026-11-synology-dsm-sqli-cve-2026-81584/"}],"language":"en","title":"CraftedSignal Threat Feed - DiskStation Manager (\u003c 7.4.1-90080-1, \u003c 7.3.2-86009-5)","version":"https://jsonfeed.org/version/1.1"}