CVE-2026-76954

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 12, 2026

Last Seen

November 12, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical SQL Injection Vulnerability Disclosed in Synology DSM70.5

Synology has released a security advisory for DiskStation Manager (DSM) addressing a critical SQL injection vulnerability (CVE-2026-76954) in the Auth API. This flaw allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks. The vulnerability affects DSM versions...