An improper certificate validation vulnerability exists in the Support Form feature of Synology DiskStation Manager (DSM) versions before 7.3.2-86009-5 and 7.4.1-90080-1. This flaw allows man-in-the-middle attackers to read arbitrary files and write specific files during the submission of the support form. The vulnerability has a medium severity rating with a CVSS score of 5.9.