CVE-2026-13635 | Synology DiskStation Manager Auth API information disclosure

A vulnerability labeled as problematic has been found in Synology DiskStation Manager up to 7.2.1-69057-11/7.2.2-72806-8/7.3.2-86009-3/7.4-90074. The affected element is an unknown function of the component Auth API. The manipulation results in information disclosure.

This vulnerability is cataloged as CVE-2026-13635. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More