Vulnerabilities & PatchesEmerging1 src
CVE-2026-40537 - Synology DiskStation Manager PersonMail API Server-Side Request Forgery
CVE ID : CVE-2026-40537
Published : Sept. 18, 2026, 8:28 a. m.
• 28 minutes ago
Description : A server-side request forgery (SSRF) vulnerability in PersonMail API in Synology DiskStation Manager (DSM) before 7. 2. 1-69057-10, 7. 2. 2-72806-7 and 7. 3. 2-86009-2 allows remote authenticated users to obtain non-sensitive information.
Severity: 4.3
• MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...