Synology
38 known vulnerabilities
Top Products
An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or wr
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup Task functiona
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository web
A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2.2.4-703 allows
An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper Backu
An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Ba
A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager
An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary
An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local use
A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files.
An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0
Origin validation error vulnerability in Synology ActiveProtect Agent before 1.1.0-0439 allows local users to write arbi
Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functional
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStati
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Safe Access in Syn
Incorrect authorization vulnerability in IO Module functionality in Synology Surveillance Station before 9.2.2-11575 and
Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-
Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station befo
Cleartext transmission of sensitive information vulnerability in Export Key functionality in Synology Surveillance Stati
Missing authorization vulnerability in AddOns functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Archiving Pull functiona
Files or directories accessible to external parties vulnerability in redis-server component in Synology BeeDrive for des
Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-13
A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to
A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows
An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read
Frequently Asked Questions
How many CVEs affect Synology?
Synology has 38 CVE records in our database, including 1 critical and 10 high severity vulnerabilities.
What are the most severe Synology vulnerabilities?
Synology has 1 critical severity (CVSS 9.0+) and 10 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for Synology vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Synology products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Synology Vulnerabilities
CyberStrike scans your infrastructure for Synology vulnerabilities and provides real-time remediation guidance.
Get Started