CVE-2026-81584 | Synology DiskStation Manager up to 7.3.1/7.3.2-86009-4/7.4.1-90080-0 User API sql injection

November 12, 2026 Yanac

A vulnerability was found in Synology DiskStation Manager up to 7.3.1/7.3.2-86009-4/7.4.1-90080-0. It has been rated as critical. The affected element is an unknown function of the component User API. Performing a manipulation results in sql injection.

This vulnerability was named CVE-2026-81584. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More