Skip to content

CVE record · 1 source

CVE-2026-16550

CVSS 6.5

An external control of file name or path vulnerability in the Media Parser in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…

Vendor: Synology
Product: DiskStation Manager (DSM)
CVSS v3.1: 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weakness: CWE-73
Exposure class: Storage / NAS

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

23

CVE NVD 2h ago

An external control of file name or path vulnerability in the Media Parser in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…

An external control of file name or path vulnerability in the Media Parser in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write arbitrary files.

CVSS 6.5 CVE-2026-16550 Synology