← Database

CVE-2026-81559

MEDIUM CVSS: 4.3 Published: 2026-11-12 Modified: 2026-11-12

Description

A missing authorization vulnerability in the TaskScheduler API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write specific files.

Affected Platforms

Unknown

Weakness Type

CWE-862

References