A missing authorization vulnerability exists in the TaskScheduler API of Synology DiskStation Manager (DSM) versions before 7.3.2-86009-5 and 7.4.1-90080-1. This flaw allows remote authenticated users to write specific files without proper authorization. The vulnerability has a medium severity rating with a CVSS score of 4.3.
A reachable assertion vulnerability exists in the synoscgi component of Synology DiskStation Manager (DSM) versions before 7.3.2-86009-5 and 7.4.1-90080-1. This vulnerability allows remote attackers to cause limited denial-of-service (DoS) conditions by triggering the assertion failure. The vulnerability does not impact confidentiality or integrity but affects availability.
A missing authorization vulnerability exists in the ACL API of Synology DiskStation Manager (DSM) versions before 7.3.2-86009-5 and 7.4.1-90080-1. This flaw allows remote authenticated users to read or write specific files without proper authorization. The vulnerability has a medium severity rating with a CVSS score of 5.4.
A missing authorization vulnerability exists in the SocketIo API of Synology DiskStation Manager (DSM) versions before 7.3.2-86009-5 and 7.4.1-90080-1. This flaw allows remote authenticated users to write specific files without proper authorization. The vulnerability has a medium severity rating with a CVSS score of 4.3, indicating limited impact primarily on integrity. No public exploits or known active exploitation have been reported. No explicit patch information is provided in the source data.
CVE-2026-75785 is a vulnerability in the VPN API of Synology DiskStation Manager (DSM) before versions 7.3.2-86009-5 and 7.4.1-90080-1. It involves improper neutralization of special elements used in OS commands, allowing remote authenticated administrators to read or write arbitrary files and perform denial-of-service attacks.
A vulnerability in Synology DiskStation Manager (DSM) before versions 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write arbitrary files and cause denial-of-service via improper link resolution before file access in the thumb component.
A vulnerability in Synology DiskStation Manager (DSM) before versions 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers controlling a compromised LDAP or Active Directory server to exploit improper neutralization of special elements in SQL commands. This can lead to arbitrary file read/write and denial-of-service conditions.
An uninitialized pointer vulnerability exists in the nfsd component of Synology DiskStation Manager (DSM) versions before 7.3.2-86009-5 and 7.4.1-90080-1. This flaw allows remote attackers to cause a denial-of-service (DoS) condition by exploiting the improper handling of uninitialized pointers.
An authentication bypass vulnerability exists in the rsync service of Synology DiskStation Manager (DSM) versions before 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, and 7.4.1-90080-1. This flaw allows remote attackers to bypass authentication using an alternate path or channel, enabling them to read specific files, write arbitrary files, and perform limited denial-of-service attacks.
A vulnerability in the Sharing API of Synology DiskStation Manager (DSM) before versions 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and perform denial-of-service attacks due to improper limitation of pathnames to restricted directories.
A vulnerability in the Audio Player component of Synology DiskStation Manager (DSM) before versions 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files due to improper neutralization of input during web page generation. This issue can lead to partial confidentiality and integrity impacts but does not affect availability.
A vulnerability in the Media Parser component of Synology DiskStation Manager (DSM) before versions 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write arbitrary files by controlling file names or paths externally. This flaw could lead to integrity impact without affecting confidentiality or availability.
Synology DiskStation Manager (DSM) versions before 7.3.2-86009-5 and 7.4.1-90080-1 contain a vulnerability in the Webdav API where critical functionality lacks proper authentication. This flaw allows remote attackers to read specific files and perform limited denial-of-service attacks without authentication.
An improper certificate validation vulnerability exists in the Support Form feature of Synology DiskStation Manager (DSM) versions before 7.3.2-86009-5 and 7.4.1-90080-1. This flaw allows man-in-the-middle attackers to read arbitrary files and write specific files during the submission of the support form. The vulnerability has a medium severity rating with a CVSS score of 5.9.
A vulnerability in Synology DiskStation Manager (DSM) prior to versions 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to bypass authorization via a user-controlled key in the SSOAuth component. This flaw enables attackers to read or write arbitrary files and perform denial-of-service attacks.
An authentication bypass vulnerability exists in the OTP component of Synology DiskStation Manager (DSM) versions before 7.3.2-86009-5 and 7.4.1-90080-1. This flaw allows remote attackers with valid user credentials to bypass authentication controls via an alternate path or channel, enabling them to read or write arbitrary files and perform denial-of-service attacks.
A relative path traversal vulnerability exists in openEuler iSulad on Linux in the oci_load_process_manifest() function, which fails to sanitize the Config path of manifest.json. This flaw allows a malicious tar package to cause the isulad process, running with root privileges, to read arbitrary files on the host system. The vulnerability affects iSulad versions through 2.1.6 and has a CVSS 3.1 score of 7.4 (high severity).
Movable Type by Six Apart Ltd. has a code injection vulnerability in its Dynamic Publishing feature. An attacker can send a crafted request to execute arbitrary PHP code. This vulnerability has a CVSS 3.0 score of 7.3, indicating high severity. No affected versions or patches are specified in the available data.
A symbolic link (symlink) following vulnerability exists in openEuler iSulad on Linux up to version 2.1.6. An attacker who can cause the victim or platform to run a crafted malicious image may exploit this flaw to have the iSulad daemon copy sensitive host directories into an anonymous volume during container creation, allowing the container to read sensitive host data.
A format string vulnerability exists in openEuler iSulad on Linux up to version 2.1.6. The issue occurs when the iSulad daemon reads stderr output from the shim process during container lifecycle operations. If the output contains format specifiers, it may lead to information leakage, denial of service, or arbitrary writes.