#nas

CVE-2026-76954: SQL Injection in Synology DiskStation Manager Auth API

SQL injection in the Synology DSM Auth API lets an unauthenticated remote attacker read and write arbitrary files and conduct denial-of-service attacks...