logo

Warning: Critical vulnerabilities in Synology DiskStation Manager (DMS) enabling unauthorized data disclosure or denial-of-service (DoS), Patch immediately!

ID: 9f5694ec-9d75-5a6e-8f15-85e0bbe497bf

STIX ID: report--9f5694ec-9d75-5a6e-8f15-85e0bbe497bf

Feed Name: Centre for Cybersecurity Belgium Advisories Feed

Threat Score
80/100

Date Published: 2026-09-21

Date Updated: 2026-10-13

...
...

**Synology DSM critical vulnerabilities (CVE-2026-13684, CVE-2026-13639):** Two critical, remotely exploitable vulnerabilities affecting multiple DSM 7.x versions (pre-7.2.1-69057-12 / pre-7.2.2-72806-9 / pre-7.3.2-86009-4 / pre-7.4-90075) could allow unauthenticated attackers to read/write arbitrary files and cause denial-of-service; both are rated CVSS 9.8. The Centre for Cybersecurity Belgium and Synology advise immediate patching and increased monitoring, though no active exploitation has been observed.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.