CVE-2026-19833 | Synology DiskStation Manager up to 7.3.1/7.3.2-86009-4/7.4.1-90080-0 ACL API improper authorization

A vulnerability was found in Synology DiskStation Manager up to 7.3.1/7.3.2-86009-4/7.4.1-90080-0. It has been classified as critical. This issue affects some unknown processing of the component ACL API. This manipulation causes improper authorization.

This vulnerability is handled as CVE-2026-19833. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More