{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/diskstation-manager-dsm--7.2.1-69057-13--7.2.2-72806-10--7.3.2-86009-5--7.4.1-90080-1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:synology:diskstation_manager:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.6,"id":"CVE-2026-85101"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["DiskStation Manager (DSM \u003c 7.2.1-69057-13, \u003c 7.2.2-72806-10, \u003c 7.3.2-86009-5, \u003c 7.4.1-90080-1)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Synology"],"content_html":"\u003cp\u003eSynology DiskStation Manager (DSM) is vulnerable to an authentication bypass via an alternate path or channel within its rsync implementation (CVE-2026-85101). This vulnerability allows unauthenticated remote attackers to perform unauthorized file operations, including reading and writing arbitrary files, or disrupting system availability through denial-of-service. The vulnerability is rated with a CVSS v3.1 base score of 8.6.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows remote attackers to manipulate files on the affected device, potentially leading to unauthorized data access, system modification, or service disruption.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eImmediately apply the relevant security patches for Synology DiskStation Manager (DSM) to remediate the vulnerability. Users must verify their DSM version and update to at least 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, or 7.4.1-90080-1, depending on their environment.\u003c/p\u003e\n","date_modified":"2026-11-12T06:13:56Z","date_published":"2026-11-12T06:13:56Z","id":"https://feed.craftedsignal.io/briefs/2026-11-synology-dsm-auth-bypass-cve-2026-85101/","summary":"Synology DiskStation Manager (DSM) contains an authentication bypass vulnerability in its rsync implementation that allows remote attackers to read or write arbitrary files and trigger a denial-of-service.","title":"Synology DiskStation Manager: Authentication bypass in rsync (CVE-2026-85101)","url":"https://feed.craftedsignal.io/briefs/2026-11-synology-dsm-auth-bypass-cve-2026-85101/"}],"language":"en","title":"CraftedSignal Threat Feed - DiskStation Manager (DSM \u003c 7.2.1-69057-13, \u003c 7.2.2-72806-10, \u003c 7.3.2-86009-5, \u003c 7.4.1-90080-1)","version":"https://jsonfeed.org/version/1.1"}