Skip to content
Critical SQL Injection Vulnerability Disclosed in Synology DSM

Critical SQL Injection Vulnerability Disclosed in Synology DSM

First seen 12 Nov 2026, 13:49 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 12, 2026 at 13:50 UTC
  • •CVE-2026-76954 is rated Critical with a CVSS score of 9.8.
  • •Remote attackers can exploit the SQL injection flaw to manipulate files and cause denial-of-service.
  • •Users are advised to upgrade to the latest DSM versions to mitigate the vulnerabilities.

Synology has released a security advisory for DiskStation Manager (DSM) addressing a critical SQL injection vulnerability (CVE-2026-76954) in the Auth API. This flaw allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks. The vulnerability affects DSM versions prior to 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, and 7.4.1-90080-1. Additionally, another vulnerability (CVE-2026-85101) was disclosed, which allows authentication bypass in rsync, rated as important. Both vulnerabilities were published on November 12, 2026, with Synology advising users to upgrade to the specified patched versions. No has been reported in the wild, and there are no known mitigations. The advisory is marked as resolved, indicating that patches are available.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 6h ago How this analysis works

Timeline

2026-11-10
Synology issues security advisory
Synology published advisory Synology-SA-26:19 detailing CVE-2026-76954 and CVE-2026-85101.
Rescana
2026-11-12
CVE records published
CVE-2026-76954 and CVE-2026-85101 were published by Synology, confirming their critical and important ratings.
www.synology.com
2026-11-12
CVE-2026-85101 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-11-12
CVE-2026-76954 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (6)

Following this threat?

Track C3RB3R, Synology and CVE-2026-76954 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 4

Common questions

Which versions of DSM are affected?
DSM versions prior to 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, and 7.4.1-90080-1 are affected.
What should users do?
Users should upgrade to the specified patched versions of DSM to mitigate the vulnerabilities.
Is there any active exploitation reported?
No, there are currently no reports of active exploitation in the wild for these vulnerabilities.