← Database

CVE-2026-77738

MEDIUM CVSS: 4.3 Published: 2026-11-12 Modified: 2026-11-12

Description

A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files.

Affected Platforms

Unknown

Weakness Type

CWE-918

References