Security Alert (A26-11-21): Multiple Vulnerabilities in Synology Products


 

Published on: 11 November 2026

Description:

Synology has published a security advisory to address multiple vulnerabilities in various versions of DiskStation Manager (DSM). The list of patches can be found at:
https://www.synology.com/en-global/security/advisory/Synology_SA_26_18
https://www.synology.com/en-global/security/advisory/Synology_SA_26_19

 

Affected Systems:

  • Synology DSM 7.2.1 prior to version 7.2.1-69057-13
  • Synology DSM 7.2.2 prior to version 7.2.2-72806-10
  • Synology DSM 7.3 prior to version 7.3.2-86009-5
  • Synology DSM 7.4 prior to version 7.4.1-90080-1

For detailed information of the affected systems, please refer to the corresponding security advisory at vendor's website.

 

Impact:

Successful exploitation of the vulnerabilities could lead to information disclosure, denial of service or tampering on an affected system.

 

Recommendation:

Software updates for affected systems are now available. System administrators of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk. For detailed information of the available patches, please refer to security advisory at vendor's website.

System administrators should contact their product support vendors for the fixes and assistance.

 

More Information:

  • https://www.synology.com/en-global/security/advisory/Synology_SA_26_18
  • https://www.synology.com/en-global/security/advisory/Synology_SA_26_19
  • https://www.hkcert.org/security-bulletin/synology-products-multiple-vulnerabilities_20261111
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13656
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13672
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15198
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15201
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16550
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18596
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18633
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18792
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19048
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19414
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19833
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74850
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74857
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-75785
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76954
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-77738
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81557 (to CVE-2026-81559)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81584
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-85098
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-85101
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86343
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-87801
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88266
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-92379
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-124993


Tag: Synology , Synology DSM
Tags