Skip to content

#synology

2 articles

Security Alerts Nov 12, 2026

CVE-2026-76954: SQL Injection in Synology DiskStation Manager Auth API

SQL injection in the Synology DSM Auth API lets an unauthenticated remote attacker read and write arbitrary files and conduct denial-of-service attacks...

Security Alerts May 27, 2026

CVE-2025-12686: Buffer overflow RCE in Synology BeeStation Manager

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation Manager (BSM) before 1.3.2-65648 and Synology BeeStation OS before 1.3.2-6564...