CVE-2026-15198 | Synology DiskStation Manager up to 7.3.1/7.3.2-86009-4/7.4.1-90080-0 Webdav API missing authentication

November 12, 2026 Yanac

A vulnerability classified as critical was found in Synology DiskStation Manager up to 7.3.1/7.3.2-86009-4/7.4.1-90080-0. Affected is an unknown function of the component Webdav API. Such manipulation leads to missing authentication.

This vulnerability is documented as CVE-2026-15198. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More