CVE-2026-18596 | Synology DiskStation Manager up to 7.3.2-86009-4/7.4.1-90080-0 OTP improper authentication

A vulnerability was found in Synology DiskStation Manager up to 7.3.2-86009-4/7.4.1-90080-0. It has been declared as very critical. This affects an unknown function of the component OTP. Executing a manipulation can lead to improper authentication.

This vulnerability is handled as CVE-2026-18596. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More