CVE-2026-76954 | Synology DiskStation Manager Auth API sql injection

A vulnerability classified as critical has been found in Synology DiskStation Manager up to 7.2.0/7.2.1-69057-12/7.3.2-86009-4/7.4.1-90080-0. Affected by this issue is some unknown functionality of the component Auth API. Performing a manipulation results in sql injection.

This vulnerability is cataloged as CVE-2026-76954. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More