CVE-2026-75785 | Synology DiskStation Manager up to 7.3.1/7.3.2-86009-4/7.4.1-90080-0 VPN API os command injection

A vulnerability was found in Synology DiskStation Manager up to 7.3.1/7.3.2-86009-4/7.4.1-90080-0. It has been declared as very critical. Impacted is an unknown function of the component VPN API. Such manipulation leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-75785. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More