Manufacturer page
Synology is one of the best fits for the site thanks to consistent advisory structure, dates, CVEs, severity, and fixed releases. Latest notable addition: Synology-SA-26:11, a Critical MailPlus Server package advisory with exact fixed builds across current DSM branches.
Synology published a Critical MailPlus Server package advisory for DSM after disclosing file access, denial-of-service, and internal-service exposure issues, with exact fixed package releases across current DSM branches.
Synology published an Important Chat Server package advisory for DSM after disclosing three vulnerabilities affecting file access and service stability, with one fixed package build across the current DSM branches it supports.
Synology published a broad DSM security advisory covering 11 vulnerabilities, with explicit fixed releases across current supported DSM branches.
Synology published a Mail Station package security advisory for DSM after disclosing that CVE-2026-5129 may allow remote authenticated users to read or write limited files.
Synology disclosed a critical DSM update for GNU Inetutils telnetd after warning that CVE-2026-32746 may allow unauthenticated remote attackers to execute arbitrary commands.
Synology released a Storage Manager package security update for DSM 7.3 and DSM 7.2.x after disclosing a local information exposure issue.
Synology published a PWN2OWN-linked DSM advisory for an SSO authentication-bypass issue that could let remote attackers bypass authentication with prior knowledge of a distinguished name.
Safe Access for SRM 1.3 received a security update for a vulnerability that could allow remote authenticated administrator-level users to read or write limited files.
RADIUS Server for SRM 1.3 received a fix for an XSS issue that could let remote authenticated administrator-level users read or write limited files and conduct limited DoS.
Synology disclosed an SMB Service issue where remote authenticated users could write to limited files; DSM packages received fixed builds and SRM/BeeStation remained ongoing at publication time.
Multiple path traversal issues in SRM 1.3 allowed remote authenticated users to read metadata or read/write limited files.