Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

DiskStation Manager (DSM) — Vulnerabilities & Security Advisories 72

All 72 CVE vulnerabilities found in DiskStation Manager (DSM), with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting Synology’s DiskStation Manager (DSM), focusing on common weakness classes such as buffer overflows, authentication bypasses, and information disclosure. It collects both critical and moderate-severity issues identified across recent DSM releases, covering advisories published within the last three years. Here, you can track Synology’s published security notices, analyze the prevalence of specific vulnerability types in this product, and review the historical pattern of disclosed flaws. The data is organized to help users understand how recurring weakness categories impact this particular server operating system, without relying on individual CVE identifiers for orientation.

Vendor: Synology

CVE ID Title CVSS Severity Published
CVE-2026-40539 Synology DSM Email API证书验证漏洞 CWE-295 7.1 High 2026-09-18
CVE-2026-40538 Synology DSM 7.3.2前认证限制不当致文件读取 CWE-307 3.7 Low 2026-09-18
CVE-2026-40535 DSM 7.2/7.3路径遍历漏洞 CWE-22 6.5 Medium 2026-09-18
CVE-2026-40533 群晖DSM 7.x敏感信息泄露漏洞 CWE-202 5.3 Medium 2026-09-18
CVE-2026-40537 群晖DSM PersonMail API SSRF漏洞 CWE-918 4.3 Medium 2026-09-18
CVE-2026-40536 群晖DSM Audio API路径遍历漏洞 CWE-22 4.3 Medium 2026-09-18
CVE-2026-40534 Synology DSM Video API XSS漏洞 CWE-79 5.4 Medium 2026-09-18
CVE-2026-40532 Synology DSM强制浏览漏洞致信息泄露 CWE-425 6.5 Medium 2026-09-18
CVE-2026-40531 Synology DSM文件操作整数溢出DoS漏洞 CWE-190 4.3 Medium 2026-09-18
CVE-2026-4036 群晖DSM低版本Sharing API SQL注入致文件获取 CWE-89 6.5 Medium 2026-09-18
CVE-2026-40530 群晖DSM特定版本User API CRLF注入漏洞 CWE-93 8.0 High 2026-09-18
CVE-2026-13683 群晖DSM EventScheduler API SQL注入漏洞 CWE-89 2.7 Low 2026-09-18
CVE-2026-13623 群晖DSM多版本主题API XSS漏洞 CWE-79 4.8 Medium 2026-09-18
CVE-2026-13666 群晖DSM共享API CRLF注入致文件写入漏洞 CWE-93 3.5 Low 2026-09-18
CVE-2026-6205 群晖DSM上传API文件名控制致任意文件写入 CWE-73 8.1 High 2026-09-18
CVE-2026-13673 群晖DSM低版本LDAP权限漏洞致任意文件读写 CWE-732 8.8 High 2026-09-18
CVE-2026-13635 群晖DSM Auth API输出转义缺陷 CWE-116 5.3 Medium 2026-09-18
CVE-2026-13639 群晖DSM多版本登录熵不足漏洞 CWE-331 9.8 Critical 2026-09-18
CVE-2026-13684 Synology DSM SCGI不当编码致任意文件读写 CWE-116 9.8 Critical 2026-09-18
CVE-2025-13392 Synology DiskStation Manager(DSM) 代码问题漏洞 CWE-754 8.1 High 2026-05-27
CVE-2024-5401 Synology DiskStation Manager和Synology Unified Controller 安全漏洞 CWE-913 4.3 Medium 2025-12-04
CVE-2024-45539 Synology DiskStation Manager和Synology Unified Controller 缓冲区错误漏洞 CWE-787 7.5 High 2025-12-04
CVE-2024-45538 Synology DiskStation Manager和Synology Unified Controller 跨站请求伪造漏洞 CWE-352 9.6 Critical 2025-12-04
CVE-2025-1021 Synology DiskStation Manager 安全漏洞 CWE-862 7.5 High 2025-04-23
CVE-2024-50629 Synology DiskStation Manager(DSM)和Synology BeeStation Manager 安全漏洞 CWE-116 5.3 Medium 2025-03-19
CVE-2024-10445 Synology DiskStation Manager(DSM)和Synology BeeStation Manager 信任管理问题漏洞 CWE-295 4.3 Medium 2025-03-19
CVE-2024-10441 Synology DiskStation Manager(DSM)和Synology BeeStation Manager 安全漏洞 CWE-116 9.8 Critical 2025-03-19
CVE-2024-10444 Synology DiskStation Manager 信任管理问题漏洞 CWE-295 7.5 High 2025-03-19
CVE-2024-0854 Synology DiskStation Manager 输入验证错误漏洞 CWE-601 5.4 Medium 2024-01-24
CVE-2023-2729 Synology DiskStation Manager 安全特征问题漏洞 5.9 Medium 2023-06-13

All 72 known CVE vulnerabilities affecting DiskStation Manager (DSM) with full Chinese analysis, references, and POCs where available.