synology security advisories
6 threat alerts tracking vulnerabilities and security advisories that affect synology products.
Vulnios monitors synology CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent synology security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2024-45538 — synology — diskstation_manager, diskstation_manager_unified_controller
Cross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller (DSMUC) before 3.1.4-2307
criticalCVE-2024-45538Critical Vulnerability: CVE-2017-15887 — synology — carddav_server
An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user credentials via a brute-fo
criticalCVE-2017-15887Critical Vulnerability: CVE-2017-11161 — synology — photo_station
Multiple SQL injection vulnerabilities in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter to label.php;
criticalCVE-2017-11161Critical Vulnerability: CVE-2017-11153 — synology — photo_station
Deserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to gain administrator privileges via a crafted serialized pa
criticalCVE-2017-11153Critical Vulnerability: CVE-2017-11151 — synology — photo_station
A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary files without authentication via the logo_upload action.
criticalCVE-2017-11151Critical Vulnerability: CVE-2016-10329 — synology — photo_station
Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code via shell metacharacters in the crafted 'X-Forwarded-For' hea
criticalCVE-2016-10329
Track synology exposure across your environment
Vulnios automatically cross-references your asset inventory against new synology CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan