Search

CVE-2026-40535 - Synology DiskStation Manager Desktop API Path Traversal

CVE ID : CVE-2026-40535 Published : Sept. 18, 2026, 8:28 a. m. • 27 minutes ago Description : An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Desktop API in Synology DiskStation Manager (DSM) before 7. 2. 1-69057-10, 7. 2. 2-72806-7 and 7. 3. 2-86009-2 allows remote attackers to write limited files and conduct limited denial-of-service attacks. Severity: 6.5 • MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...