DiskStation Manager (DSM, < 7.3.2-86009-5, < 7.4.1-90080-1) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/diskstation-manager-dsm--7.3.2-86009-5--7.4.1-90080-1/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 12 Nov 2026 09:30:44 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSynology DiskStation Manager: Sharing API Path Traversal (CVE-2026-18792)https://feed.craftedsignal.io/briefs/2026-11-synology-dsm-sharing-api-path-traversal-cve-2026-18792/Thu, 12 Nov 2026 09:30:44 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-synology-dsm-sharing-api-path-traversal-cve-2026-18792/CVE-2026-18792 is a path traversal vulnerability in the Sharing API of Synology DiskStation Manager (DSM) that allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks.CVE-2026-18792 is an improper limitation of a pathname to a restricted directory vulnerability in the Sharing API of Synology DiskStation Manager (DSM).

Impact

This vulnerability allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks.

Recommendation

Monitor for updates or security guidance from the vendor regarding this vulnerability.

]]>highadvisory