Threats tagged 'ghsa-8wrc-pj93-f9hp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.8	CVE-2026-13672An authorization bypass through user-controlled key vulnerability in the SSOAuth in Synology DiskStation Manager (DSM) High8.82026-11-12GCVE DatabaseCVE-2026-13672 A vulnerability in Synology DiskStation Manager (DSM) prior to versions 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to bypass authorization via a user-controlled key in the SSOAuth component. This flaw enables attackers to read or write arbitrary files and perform denial-of-service attacks. Report on CVE-2026-13672 Vulnerability CWE-639 #ghsa-8wrc-pj93-f9hp	GCVE Database	2026-11-12

Page 1 of 1