Synology
- Total products in the ecosystem
- 32
- Total vulnerabilities (90 days)
- 23
en
Verify to analyze this security profile
As of 09/19/2026, Synology recorded 23 security vulnerabilities in the last 90 days across 3 products, including 8 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, DiskStation Manager (DSM) had the most security vulnerabilities in the Synology ecosystem, with 19 vulnerabilities—approximately 82.61% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-40539 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityHigh |
CVE-2026-40538 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityLow |
CVE-2026-40535 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityMedium |
CVE-2026-40533 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityMedium |
CVE-2026-40537 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityMedium |
CVE-2026-40536 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityMedium |
CVE-2026-40534 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityMedium |
CVE-2026-40532 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityMedium |
CVE-2026-40531 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityMedium |
CVE-2026-4036 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityMedium |
CVE-2026-40530 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityHigh |
CVE-2026-13683 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityLow |
CVE-2026-13623 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityMedium |
CVE-2026-13666 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityLow |
CVE-2026-6205 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityHigh |
CVE-2026-13673 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityHigh |
CVE-2026-13635 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityMedium |
CVE-2026-13639 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityCritical |
CVE-2026-13684 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published09/18/2026 | SeverityCritical |
CVE-2026-9548 | Exploitation statusNot known exploited | FixYes | Affected productSynology Chat Server | Published08/28/2026 | SeverityMedium |
CVE-2026-9491 | Exploitation statusNot known exploited | FixYes | Affected productSynology Chat Server | Published08/28/2026 | SeverityMedium |
CVE-2026-40541 | Exploitation statusNot known exploited | FixYes | Affected productSynology Chat Server | Published08/28/2026 | SeverityCritical |
CVE-2026-4793 | Exploitation statusNot known exploited | FixYes | Affected productSynology Assistant | Published08/03/2026 | SeverityHigh |
CVE-2024-47263 | Exploitation statusNot known exploited | FixYes | Affected productHyper Backup | Published06/03/2026 | SeverityMedium |
CVE-2024-47273 | Exploitation statusNot known exploited | FixYes | Affected productHyper Backup | Published06/03/2026 | SeverityMedium |
CVE-2022-49036 | Exploitation statusNot known exploited | FixYes | Affected productSynology Active Backup for Business Recovery Media Creator | Published06/03/2026 | SeverityHigh |
CVE-2022-49042 | Exploitation statusNot known exploited | FixYes | Affected productSynology Hyper Backup Explorer | Published06/03/2026 | SeverityHigh |
CVE-2023-52951 | Exploitation statusNot known exploited | FixYes | Affected productSynology Note Station Client | Published06/03/2026 | SeverityMedium |
CVE-2026-2237 | Exploitation statusNot known exploited | FixYes | Affected productStorage Manager | Published05/27/2026 | SeverityMedium |
CVE-2025-66593 | Exploitation statusNot known exploited | FixYes | Affected productSynology Assistant | Published05/27/2026 | SeverityMedium |
CVE-2025-66592 | Exploitation statusNot known exploited | FixYes | Affected productSynology Active Backup for Business Agent | Published05/27/2026 | SeverityMedium |
CVE-2025-30028 | Exploitation statusNot known exploited | FixYes | Affected productActive Backup for Business | Published05/27/2026 | SeverityHigh |
CVE-2025-14713 | Exploitation statusNot known exploited | FixYes | Affected productC2 Identity Edge Server | Published05/27/2026 | SeverityHigh |
CVE-2025-13593 | Exploitation statusNot known exploited | FixYes | Affected productActiveProtect Agent | Published05/27/2026 | SeverityMedium |
CVE-2025-12686 | Exploitation statusNot known exploited | FixYes | Affected productBeeStation OS | Published05/27/2026 | SeverityCritical |
CVE-2025-13392 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published05/27/2026 | SeverityHigh |
CVE-2025-13167 | Exploitation statusNot known exploited | FixYes | Affected productSynology Contacts | Published05/27/2026 | SeverityMedium |
CVE-2025-10466 | Exploitation statusNot known exploited | FixYes | Affected productSafe Access | Published05/27/2026 | SeverityMedium |
CVE-2024-47272 | Exploitation statusNot known exploited | FixYes | Affected productSurveillance Station | Published05/27/2026 | SeverityLow |
CVE-2024-47271 | Exploitation statusNot known exploited | FixYes | Affected productSurveillance Station | Published05/27/2026 | SeverityMedium |
CVE-2024-47270 | Exploitation statusNot known exploited | FixYes | Affected productSurveillance Station | Published05/27/2026 | SeverityLow |
CVE-2024-47269 | Exploitation statusNot known exploited | FixYes | Affected productSurveillance Station | Published05/27/2026 | SeverityMedium |
CVE-2024-47268 | Exploitation statusNot known exploited | FixYes | Affected productSurveillance Station | Published05/27/2026 | SeverityMedium |
CVE-2024-47267 | Exploitation statusNot known exploited | FixYes | Affected productSurveillance Station | Published05/27/2026 | SeverityLow |
CVE-2024-11399 | Exploitation statusNot known exploited | FixYes | Affected productBeeDrive for desktop | Published05/27/2026 | SeverityMedium |
CVE-2023-52945 | Exploitation statusNot known exploited | FixYes | Affected productBeeDrive for desktop | Published05/27/2026 | SeverityHigh |
CVE-2021-47961 | Exploitation statusNot known exploited | FixYes | Affected productSynology SSL VPN Client | Published04/10/2026 | SeverityHigh |
CVE-2021-47960 | Exploitation statusNot known exploited | FixYes | Affected productSynology SSL VPN Client | Published04/10/2026 | SeverityMedium |
CVE-2026-3091 | Exploitation statusNot known exploited | FixYes | Affected productSynology Presto Client | Published02/24/2026 | SeverityMedium |
CVE-2025-8074 | Exploitation statusNot known exploited | FixYes | Affected productBeeDrive for desktop | Published12/04/2025 | SeverityMedium |
CVE-2025-54160 | Exploitation statusNot known exploited | FixYes | Affected productBeeDrive for desktop | Published12/04/2025 | SeverityHigh |
CVE-2025-54159 | Exploitation statusNot known exploited | FixYes | Affected productBeeDrive for desktop | Published12/04/2025 | SeverityHigh |
CVE-2025-54158 | Exploitation statusNot known exploited | FixYes | Affected productBeeDrive for desktop | Published12/04/2025 | SeverityHigh |
CVE-2025-2848 | Exploitation statusNot known exploited | FixYes | Affected productSynology Mail Server | Published12/04/2025 | SeverityMedium |
CVE-2025-29846 | Exploitation statusNot known exploited | FixYes | Affected productSynology Router Manager (SRM) | Published12/04/2025 | SeverityHigh |
CVE-2025-29845 | Exploitation statusNot known exploited | FixYes | Affected productSynology Router Manager (SRM) | Published12/04/2025 | SeverityMedium |
CVE-2025-29844 | Exploitation statusNot known exploited | FixYes | Affected productSynology Router Manager (SRM) | Published12/04/2025 | SeverityMedium |
CVE-2025-29843 | Exploitation statusNot known exploited | FixYes | Affected productSynology Router Manager (SRM) | Published12/04/2025 | SeverityMedium |
CVE-2024-5401 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published12/04/2025 | SeverityMedium |
CVE-2024-45539 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published12/04/2025 | SeverityHigh |
CVE-2024-45538 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published12/04/2025 | SeverityCritical |
CVE-2024-13987 | Exploitation statusNot known exploited | FixYes | Affected productRADIUS Server | Published08/29/2025 | SeverityMedium |
CVE-2024-53288 | Exploitation statusNot known exploited | FixYes | Affected productSynology Router Manager (SRM) | Published07/23/2025 | SeverityMedium |
CVE-2024-53287 | Exploitation statusNot known exploited | FixYes | Affected productSynology Router Manager (SRM) | Published07/23/2025 | SeverityMedium |
CVE-2024-53286 | Exploitation statusNot known exploited | FixYes | Affected productSynology Router Manager (SRM) | Published07/23/2025 | SeverityHigh |
CVE-2025-4679 | Exploitation statusNot known exploited | FixNot confirmed | Affected productActive Backup for Microsoft 365 | Published05/16/2025 | SeverityMedium |
CVE-2025-1021 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published04/23/2025 | SeverityHigh |
CVE-2024-50631 | Exploitation statusNot known exploited | FixYes | Affected productSynology Drive Server | Published03/19/2025 | SeverityHigh |
CVE-2024-50630 | Exploitation statusNot known exploited | FixYes | Affected productSynology Drive Server | Published03/19/2025 | SeverityHigh |
CVE-2024-50629 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published03/19/2025 | SeverityMedium |
CVE-2024-11131 | Exploitation statusNot known exploited | FixYes | Affected productCamera Firmware | Published03/19/2025 | SeverityCritical |
CVE-2024-10442 | Exploitation statusNot known exploited | FixYes | Affected productUnified Controller (DSMUC) | Published03/19/2025 | SeverityCritical |
CVE-2024-10445 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published03/19/2025 | SeverityMedium |
CVE-2024-10441 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published03/19/2025 | SeverityCritical |
CVE-2024-10444 | Exploitation statusNot known exploited | FixYes | Affected productDiskStation Manager (DSM) | Published03/19/2025 | SeverityHigh |
CVE-2024-47266 | Exploitation statusNot known exploited | FixYes | Affected productActive Backup for Business | Published02/13/2025 | SeverityLow |
CVE-2024-47265 | Exploitation statusNot known exploited | FixYes | Affected productActive Backup for Business | Published02/13/2025 | SeverityMedium |
CVE-2024-47264 | Exploitation statusNot known exploited | FixYes | Affected productActive Backup for Business | Published02/13/2025 | SeverityMedium |
CVE-2024-4464 | Exploitation statusNot known exploited | FixYes | Affected productMedia Server | Published12/18/2024 | SeverityHigh |
CVE-2024-53285 | Exploitation statusNot known exploited | FixYes | Affected productSynology Router Manager (SRM) | Published12/09/2024 | SeverityMedium |
CVE-2024-53284 | Exploitation statusNot known exploited | FixYes | Affected productSynology Router Manager (SRM) | Published12/09/2024 | SeverityMedium |
CVE-2024-53283 | Exploitation statusNot known exploited | FixYes | Affected productSynology Router Manager (SRM) | Published12/09/2024 | SeverityMedium |
CVE-2024-53282 | Exploitation statusNot known exploited | FixYes | Affected productSynology Router Manager (SRM) | Published12/09/2024 | SeverityMedium |
CVE-2024-53281 | Exploitation statusNot known exploited | FixYes | Affected productSynology Router Manager (SRM) | Published12/09/2024 | SeverityMedium |
CVE-2024-53279 | Exploitation statusNot known exploited | FixYes | Affected productSynology Router Manager (SRM) | Published12/09/2024 | SeverityMedium |
CVE-2024-53280 | Exploitation statusNot known exploited | FixYes | Affected productSynology Router Manager (SRM) | Published12/09/2024 | SeverityMedium |
CVE-2023-52944 | Exploitation statusNot known exploited | FixYes | Affected productSurveillance Station | Published12/04/2024 | SeverityMedium |
CVE-2023-52943 | Exploitation statusNot known exploited | FixYes | Affected productSurveillance Station | Published12/04/2024 | SeverityMedium |
CVE-2024-11398 | Exploitation statusNot known exploited | FixYes | Affected productSynology Router Manager (SRM) | Published12/04/2024 | SeverityHigh |
CVE-2024-10443 | Exploitation statusNot known exploited | FixYes | Affected productBeePhotos | Published11/15/2024 | SeverityCritical |
CVE-2023-52949 | Exploitation statusNot known exploited | FixYes | Affected productSynology Active Backup for Business Agent | Published09/26/2024 | SeverityMedium |
CVE-2023-52948 | Exploitation statusNot known exploited | FixYes | Affected productSynology Active Backup for Business Agent | Published09/26/2024 | SeverityMedium |
CVE-2023-52947 | Exploitation statusNot known exploited | FixYes | Affected productSynology Active Backup for Business Agent | Published09/26/2024 | SeverityMedium |
CVE-2023-52950 | Exploitation statusNot known exploited | FixYes | Affected productSynology Active Backup for Business Agent | Published09/26/2024 | SeverityMedium |
CVE-2022-49041 | Exploitation statusNot known exploited | FixYes | Affected productSynology Drive Client | Published09/26/2024 | SeverityMedium |
CVE-2022-49040 | Exploitation statusNot known exploited | FixYes | Affected productSynology Drive Client | Published09/26/2024 | SeverityMedium |
CVE-2022-49039 | Exploitation statusNot known exploited | FixYes | Affected productSynology Drive Client | Published09/26/2024 | SeverityMedium |
CVE-2022-49038 | Exploitation statusNot known exploited | FixYes | Affected productSynology Drive Client | Published09/26/2024 | SeverityHigh |
CVE-2022-49037 | Exploitation statusNot known exploited | FixYes | Affected productSynology Drive Client | Published09/26/2024 | SeverityMedium |
CVE-2023-52946 | Exploitation statusNot known exploited | FixYes | Affected productSynology Drive Client | Published09/26/2024 | SeverityHigh |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan