CVE-2026-19414 | Synology DiskStation Manager up to 7.3.1/7.3.2-86009-4/7.4.1-90080-0 Promotion API missing authentication

November 12, 2026 Yanac

A vulnerability was found in Synology DiskStation Manager up to 7.3.1/7.3.2-86009-4/7.4.1-90080-0. It has been rated as problematic. This impacts an unknown function of the component Promotion API. The manipulation leads to missing authentication.

This vulnerability is uniquely identified as CVE-2026-19414. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More