Synology
Number 58 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
317
Critical
33
High
84
Known Exploited
0
Exploit available
5
Network, no login needed
36.6%
Of 273 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 49 | 4 | 12 | 27 | 6 | 0 |
| 2025 | 29 | 4 | 10 | 14 | 1 | 0 |
| 2024 | 47 | 3 | 10 | 34 | 0 | 0 |
| 2023 | 13 | 3 | 3 | 6 | 1 | 0 |
| 2022 | 35 | 6 | 9 | 20 | 0 | 0 |
| 2021 | 33 | 11 | 16 | 6 | 0 | 0 |
| 2020 | 14 | 2 | 7 | 5 | 0 | 0 |
| 2019 | 28 | 0 | 9 | 19 | 0 | 0 |
| 2018 | 31 | 0 | 8 | 17 | 0 | 6 |
| 2017 | 38 | 0 | 0 | 0 | 0 | 38 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| DiskStation Manager (DSM) | 72 | 31 |
| Synology Router Manager (SRM) | 41 | 15 |
| Surveillance Station | 25 | 3 |
| Synology Photo Station | 18 | 4 |
| Synology DiskStation Manager (DSM) | 13 | 11 |
| Photo Station | 12 | 4 |
| Camera Firmware | 9 | 6 |
| BeeDrive for desktop | 6 | 4 |
| Calendar | 6 | 1 |
| Synology Drive Client | 6 | 2 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Cross-Site Scripting | 45 | 2 |
| Path Traversal | 38 | 9 |
| Memory Corruption | 25 | 17 |
| SQL Injection | 25 | 9 |
| Command Injection | 20 | 18 |
| Information Disclosure | 16 | 1 |
| Server-Side Request Forgery | 11 | 1 |
| Cleartext Transmission of Sensitive Information | 9 | 4 |
| Missing Authorization | 8 | 5 |
| Authentication Issues | 6 | 3 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-6205 | Synology DiskStation Manager (DSM) vulnerability | High | 0.5% | |
| CVE-2026-40539 | Synology DiskStation Manager (DSM) vulnerability | High | 0.1% | |
| CVE-2026-40538 | Synology DiskStation Manager (DSM) vulnerability | Low | 0.4% | |
| CVE-2026-40537 | Synology DiskStation Manager (DSM): Server-Side Request Forgery | Medium | 0.3% | |
| CVE-2026-40536 | Synology DiskStation Manager (DSM): Path Traversal | Medium | 0.4% | |
| CVE-2026-40535 | Synology DiskStation Manager (DSM): Path Traversal | Medium | 0.5% | |
| CVE-2026-40534 | Synology DiskStation Manager (DSM): Cross-Site Scripting | Medium | 0.3% | |
| CVE-2026-40533 | Synology DiskStation Manager (DSM) vulnerability | Medium | 0.4% | |
| CVE-2026-40532 | Synology DiskStation Manager (DSM) vulnerability | Medium | 0.4% | |
| CVE-2026-40531 | Synology DiskStation Manager (DSM): Memory Corruption | Medium | 0.4% |