← Database

CVE-2026-2237

MEDIUM CVSS: 6.2 Published: 2026-05-27 Modified: 2026-06-17

Description

A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local users on Windows to obtain sensitive information.

Affected Platforms

Synology Diskstation ManagerSynology Storage Manager

Weakness Type

CWE-598

References