CVE-2026-13673 | Synology DiskStation Manager up to 7.4-90074 LDAP API permission

A vulnerability marked as very critical has been reported in Synology DiskStation Manager up to 7.2.0/7.2.1-69057-11/7.2.2-72806-8/7.3.2-86009-3/7.4-90074. The impacted element is an unknown function of the component LDAP API. This manipulation causes permission issues.

This vulnerability is registered as CVE-2026-13673. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More