CVE Tools
Track your stack

Diskstation Manager (Dsm)

99 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Diskstation Manager (Dsm), a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Diskstation Manager (Dsm) CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Diskstation Manager (Dsm) CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-034
2025-041
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-123
2026-010
2026-020
2026-030
2026-040
2026-051
2026-060
2026-070
2026-080
2026-0919
2026-100
2026-1127

Severity

How the 99 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical1010%
  • High3333%
  • Medium5354%
  • Low33%

Latest CVEs

The 15 most recently published vulnerabilities affecting Diskstation Manager (Dsm).

  1. CVE-2026-76954An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology DiskStation Manager (DSM) before 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, and 7...9.8
  2. CVE-2026-85101An authentication bypass using an alternate path or channel vulnerability in the rsync in Synology DiskStation Manager (DSM) before 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, and 7.4.1-90080-1 ...8.6
  3. CVE-2026-88266An external control of system or configuration setting vulnerability in the synomount in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users ...4.3
  4. CVE-2026-81559A missing authorization vulnerability in the TaskScheduler API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write specific files.4.3
  5. CVE-2026-81558A missing authorization vulnerability in the SocketIo API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write specific files.4.3
  6. CVE-2026-77738A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files.4.3
  7. CVE-2026-74850An improper limitation of a pathname to a restricted directory vulnerability in the contentextract in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authent...4.3
  8. CVE-2026-19414A missing authorization vulnerability in the Promotion API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write specific files.4.3
  9. CVE-2026-85098A reachable assertion vulnerability in the synoscgi in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to conduct limited denial-of-service attacks.5.3
  10. CVE-2026-124993An incorrect authorization vulnerability in the Security Advisor in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to read specific files.5.3
  11. CVE-2026-92379An improper neutralization of input during web page generation vulnerability in the Notification API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authe...5.4
  12. CVE-2026-81557An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticate...5.4
  13. CVE-2026-19833A missing authorization vulnerability in the ACL API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files.5.4
  14. CVE-2026-13656An improper neutralization of input during web page generation vulnerability in the Audio Player in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authentic...5.4
  15. CVE-2026-15201An improper certificate validation vulnerability in the Support Form in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows man-in-the-middle attackers to read arbitrar...5.9

Product grouping is registry-driven, with AI assist and human review. How it works