Vulnerabilities & PatchesEmerging1 src
CVE-2026-40539 - Synology DiskStation Manager Email API Improper Certificate Validation
CVE ID : CVE-2026-40539
Published : Sept. 18, 2026, 8:29 a. m.
• 26 minutes ago
Description : An improper certificate validation vulnerability in Email API in Synology DiskStation Manager (DSM) before 7. 2. 1-69057-10, 7. 2. 2-72806-7 and 7. 3. 2-86009-2 allows man-in-the-middle attackers to read or write arbitrary files and conduct denial-of-service attacks.
Severity: 7.1
• HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...