目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Synology 厂商漏洞列表 / CVE 中文分析 317

Synology 厂商相关 317 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Synology 专注于网络附加存储（NAS）及网络安全解决方案，其 DSM 操作系统广泛应用于企业数据管理。历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本攻击，常因 Web 界面组件缺陷引发。值得关注的是，其曾爆发 Log4j 高危漏洞及针对 DSM 的恶意软件攻击，促使厂商强化固件签名验证与安全更新机制，以应对日益复杂的供应链威胁。

Top products by Synology: DiskStation Manager (DSM) Synology Router Manager (SRM) Surveillance Station Synology Photo Station Synology DiskStation Manager (DSM) Photo Station Camera Firmware BeeDrive for desktop Synology Drive Client Calendar Synology Active Backup for Business Agent Synology Calendar Media Server Note Station Drive Active Backup for Business Safe Access Download Station Synology SSL VPN Client Synology Chat Server Audio Station Synology Download Station Presto File Server Office CardDAV Server Chat Synology Assistant Synology Note Station Client Synology Video Station Synology Drive Server
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-40539 Synology DSM Email API证书验证漏洞 — DiskStation Manager (DSM) CWE-295 7.1 High 2026-09-18
CVE-2026-40538 Synology DSM 7.3.2前认证限制不当致文件读取 — DiskStation Manager (DSM) CWE-307 3.7 Low 2026-09-18
CVE-2026-40535 DSM 7.2/7.3路径遍历漏洞 — DiskStation Manager (DSM) CWE-22 6.5 Medium 2026-09-18
CVE-2026-40533 群晖DSM 7.x敏感信息泄露漏洞 — DiskStation Manager (DSM) CWE-202 5.3 Medium 2026-09-18
CVE-2026-40537 群晖DSM PersonMail API SSRF漏洞 — DiskStation Manager (DSM) CWE-918 4.3 Medium 2026-09-18
CVE-2026-40536 群晖DSM Audio API路径遍历漏洞 — DiskStation Manager (DSM) CWE-22 4.3 Medium 2026-09-18
CVE-2026-40534 Synology DSM Video API XSS漏洞 — DiskStation Manager (DSM) CWE-79 5.4 Medium 2026-09-18
CVE-2026-40532 Synology DSM强制浏览漏洞致信息泄露 — DiskStation Manager (DSM) CWE-425 6.5 Medium 2026-09-18
CVE-2026-40531 Synology DSM文件操作整数溢出DoS漏洞 — DiskStation Manager (DSM) CWE-190 4.3 Medium 2026-09-18
CVE-2026-4036 群晖DSM低版本Sharing API SQL注入致文件获取 — DiskStation Manager (DSM) CWE-89 6.5 Medium 2026-09-18
CVE-2026-40530 群晖DSM特定版本User API CRLF注入漏洞 — DiskStation Manager (DSM) CWE-93 8.0 High 2026-09-18
CVE-2026-13683 群晖DSM EventScheduler API SQL注入漏洞 — DiskStation Manager (DSM) CWE-89 2.7 Low 2026-09-18
CVE-2026-13623 群晖DSM多版本主题API XSS漏洞 — DiskStation Manager (DSM) CWE-79 4.8 Medium 2026-09-18
CVE-2026-13666 群晖DSM共享API CRLF注入致文件写入漏洞 — DiskStation Manager (DSM) CWE-93 3.5 Low 2026-09-18
CVE-2026-6205 群晖DSM上传API文件名控制致任意文件写入 — DiskStation Manager (DSM) CWE-73 8.1 High 2026-09-18
CVE-2026-13673 群晖DSM低版本LDAP权限漏洞致任意文件读写 — DiskStation Manager (DSM) CWE-732 8.8 High 2026-09-18
CVE-2026-13635 群晖DSM Auth API输出转义缺陷 — DiskStation Manager (DSM) CWE-116 5.3 Medium 2026-09-18
CVE-2026-13639 群晖DSM多版本登录熵不足漏洞 — DiskStation Manager (DSM) CWE-331 9.8 Critical 2026-09-18
CVE-2026-13684 Synology DSM SCGI不当编码致任意文件读写 — DiskStation Manager (DSM) CWE-116 9.8 Critical 2026-09-18
CVE-2026-9548 Synology Chat Server 跨站脚本漏洞 — Synology Chat Server CWE-79 6.5 Medium 2026-08-28
CVE-2026-9491 Synology Chat Server 服务端请求伪造漏洞 — Synology Chat Server CWE-918 4.3 Medium 2026-08-28
CVE-2026-40541 Synology Chat Server 跨站脚本漏洞 — Synology Chat Server CWE-79 9.0 Critical 2026-08-28
CVE-2026-4793 Synology Assistant 权限许可和访问控制问题漏洞 — Synology Assistant CWE-276 7.3 High 2026-08-03
CVE-2024-47263 Synology Hyper Backup 路径遍历漏洞 — Hyper Backup CWE-22 4.1 Medium 2026-06-03
CVE-2024-47273 Synology Hyper Backup 路径遍历漏洞 — Hyper Backup CWE-22 4.3 Medium 2026-06-03
CVE-2022-49036 Synology Active Backup for Business Recovery Media Creator 安全漏洞 — Synology Active Backup for Business Recovery Media Creator CWE-829 7.8 High 2026-06-03
CVE-2022-49042 Synology Hyper Backup Explorer 安全漏洞 — Synology Hyper Backup Explorer CWE-829 7.8 High 2026-06-03
CVE-2023-52951 Synology Note Station Client 安全漏洞 — Synology Note Station Client CWE-319 5.9 Medium 2026-06-03
CVE-2026-2237 Synology DSM 安全漏洞 — Storage Manager CWE-598 6.2 Medium 2026-05-27
CVE-2025-66593 Synology Assistant 访问控制错误漏洞 — Synology Assistant CWE-346 6.1 Medium 2026-05-27

本页汇总了 Synology 厂商截至目前公开的全部 317 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。