Product
CVE-2026-18792 is a path traversal vulnerability in the Sharing API of Synology DiskStation Manager (DSM) that allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks.