CVE-2026-18792 | Synology DiskStation Manager up to 7.3.1/7.3.2-86009-4/7.4.1-90080-0 Sharing API path traversal

A vulnerability, which was classified as very critical, was found in Synology DiskStation Manager up to 7.3.1/7.3.2-86009-4/7.4.1-90080-0. Affected by this issue is some unknown functionality of the component Sharing API. Executing a manipulation can lead to path traversal.

This vulnerability appears as CVE-2026-18792. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More