CVE record · 1 source
CVE-2026-92379
CVSS 5.4An improper neutralization of input during web page generation vulnerability in the Notification API in Synology DiskStation Manager (DSM) before…
- Vendor
- Synology
- Product
- DiskStation Manager (DSM)
- CVSS v3.1
- 5.4 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- Weakness
- CWE-79
- Exposure class
- Storage / NAS
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
An improper neutralization of input during web page generation vulnerability in the Notification API in Synology DiskStation Manager (DSM) before…
An improper neutralization of input during web page generation vulnerability in the Notification API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write…