The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-85101: Synology DiskStation Manager (DSM): An authentication bypass using an alternate path or channel vulnerability in the rsync in Synology DiskStation Manager…8.6 HighN/AN/ANov 12, 2026
CVE-2026-85098: Synology DiskStation Manager (DSM): A reachable assertion vulnerability in the synoscgi in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…5.3 MediumN/AN/ANov 12, 2026
CVE-2026-81584: Synology DiskStation Manager (DSM): An improper neutralization of special elements used in an SQL command vulnerability in the User API in Synology…8.1 HighN/AN/ANov 12, 2026
CVE-2026-81559: Synology DiskStation Manager (DSM): A missing authorization vulnerability in the TaskScheduler API in Synology DiskStation Manager (DSM) before…4.3 MediumN/AN/ANov 12, 2026
CVE-2026-81558: Synology DiskStation Manager (DSM): A missing authorization vulnerability in the SocketIo API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5…4.3 MediumN/AN/ANov 12, 2026
CVE-2026-81557: Synology DiskStation Manager (DSM): An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation…5.4 MediumN/AN/ANov 12, 2026
CVE-2026-77738: Synology DiskStation Manager (DSM): A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager (DSM) before…4.3 MediumN/AN/ANov 12, 2026
CVE-2026-76954: Synology DiskStation Manager (DSM): An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology…9.8 CriticalN/AN/ANov 12, 2026
CVE-2026-75785: Synology DiskStation Manager (DSM): An improper neutralization of special elements used in an OS command vulnerability in the VPN API in Synology…7.2 HighN/AN/ANov 12, 2026
CVE-2026-74857: Synology DiskStation Manager (DSM): A missing critical step in authentication vulnerability in the Auth API in Synology DiskStation Manager (DSM) before…8.8 HighN/AN/ANov 12, 2026
CVE-2026-74850: Synology DiskStation Manager (DSM): An improper limitation of a pathname to a restricted directory vulnerability in the contentextract in Synology…4.3 MediumN/AN/ANov 12, 2026
CVE-2026-19833: Synology DiskStation Manager (DSM): A missing authorization vulnerability in the ACL API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…5.4 MediumN/AN/ANov 12, 2026
CVE-2026-19414: Synology DiskStation Manager (DSM): A missing authorization vulnerability in the Promotion API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5…4.3 MediumN/AN/ANov 12, 2026
CVE-2026-19048: Synology DiskStation Manager (DSM): An improper link resolution before file access vulnerability in the thumb in Synology DiskStation Manager (DSM) before…8.1 HighN/AN/ANov 12, 2026
CVE-2026-18792: Synology DiskStation Manager (DSM): An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation…8.8 HighN/AN/ANov 12, 2026
CVE-2026-18633: Synology DiskStation Manager (DSM): An access of uninitialized pointer vulnerability in the nfsd in Synology DiskStation Manager (DSM) before 7.3.2-86009-5…7.5 HighN/AN/ANov 12, 2026
CVE-2026-18596: Synology DiskStation Manager (DSM): An authentication bypass using an alternate path or channel vulnerability in the OTP in Synology DiskStation Manager…8.1 HighN/AN/ANov 12, 2026
CVE-2026-16550: Synology DiskStation Manager (DSM): An external control of file name or path vulnerability in the Media Parser in Synology DiskStation Manager (DSM) before…6.5 MediumN/AN/ANov 12, 2026
CVE-2026-15201: Synology DiskStation Manager (DSM): An improper certificate validation vulnerability in the Support Form in Synology DiskStation Manager (DSM) before…5.9 MediumN/AN/ANov 12, 2026
CVE-2026-15198: Synology DiskStation Manager (DSM): A missing authentication for critical functionality vulnerability in the Webdav API in Synology DiskStation Manager…6.5 MediumN/AN/ANov 12, 2026
CVE-2026-13672: Synology DiskStation Manager (DSM): An authorization bypass through user-controlled key vulnerability in the SSOAuth in Synology DiskStation Manager (DSM)…8.8 HighN/AN/ANov 12, 2026
CVE-2026-13656: Synology DiskStation Manager (DSM): An improper neutralization of input during web page generation vulnerability in the Audio Player in Synology…5.4 MediumN/AN/ANov 12, 2026
CVE-2026-124993: Synology DiskStation Manager (DSM): An incorrect authorization vulnerability in the Security Advisor in Synology DiskStation Manager (DSM) before…5.3 MediumN/AN/ANov 12, 2026
CVE-2026-117687: Six Apart Ltd.: Movable Type provided by Six Apart Ltd7.3 High6.9 MediumN/ANov 12, 2026
CVE-2026-111436: openEuler iSulad: Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux4.4 MediumN/AN/ANov 12, 2026
326-350 of 433023