Skip to content

CVE record · 1 source

CVE-2026-15198

CVSS 6.5

A missing authentication for critical functionality vulnerability in the Webdav API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…

Vendor: Synology
Product: DiskStation Manager (DSM)
CVSS v3.1: 6.5 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Weakness: CWE-306
Exposure class: Storage / NAS

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

23

CVE NVD 2h ago

A missing authentication for critical functionality vulnerability in the Webdav API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…

A missing authentication for critical functionality vulnerability in the Webdav API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to read specific files and conduct limited…

CVSS 6.5 CVE-2026-15198 Synology