Product by Synology

    Diskstation Manager (dsm)

    72 known vulnerabilities in Diskstation Manager (dsm) (Synology), 0 of them actively exploited (CISA KEV).

    Key figures

    72

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    16

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Diskstation Manager (dsm) (Synology)
    HighCVE-2017-15889

    Synology DiskStation Manager (DSM): Command Injection

    also in 1 other product

    		8.8
    MediumCVE-2024-50629

    Synology DiskStation Manager (DSM): Improper Encoding or Escaping of Output

    also in 3 other products

    		5.3
    CriticalCVE-2022-22687

    Synology DiskStation Manager (DSM): Classic Buffer Overflow

    also in 2 other products

    		9.8
    CriticalCVE-2021-27649

    Synology DiskStation Manager (DSM): Use After Free

    also in 2 other products

    		9.8
    CriticalCVE-2022-27625

    Synology DiskStation Manager (DSM): Improper Restriction of Operations within the Bounds of a Memory Buffer

    also in 1 other product

    		10.0
    CriticalCVE-2022-27624

    Synology DiskStation Manager (DSM): Improper Restriction of Operations within the Bounds of a Memory Buffer

    also in 1 other product

    		10.0
    CriticalCVE-2026-13639

    Synology DiskStation Manager (DSM): Insufficient Entropy

    also in 1 other product

    		9.8
    CriticalCVE-2024-10441

    Synology DiskStation Manager (DSM): Improper Encoding or Escaping of Output

    also in 3 other products

    		9.8
    CriticalCVE-2026-13684

    Synology DiskStation Manager (DSM): Improper Encoding or Escaping of Output

    also in 1 other product

    		9.8
    HighCVE-2018-13284

    Synology DiskStation Manager (DSM): OS Command Injection

    also in 1 other product

    		7.5
    HighCVE-2022-22688

    Synology DiskStation Manager (DSM): Command Injection

    also in 1 other product

    		8.8
    CriticalCVE-2022-27626

    Synology DiskStation Manager (DSM): Race Condition

    also in 1 other product

    		10.0
    HighCVE-2017-12075

    Synology DiskStation Manager (DSM): Command Injection

    also in 1 other product

    		7.2
    HighCVE-2026-13673

    Synology DiskStation Manager (DSM): Incorrect Permission Assignment for Critical Resource

    also in 1 other product

    		8.8
    HighCVE-2022-27616

    Synology DiskStation Manager (DSM): OS Command Injection

    also in 1 other product

    		7.2
    CriticalCVE-2018-8919

    Synology DiskStation Manager (DSM): Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		8.3
    HighCVE-2021-29085

    Synology DiskStation Manager (DSM): Injection

    also in 2 other products

    		8.6
    HighCVE-2026-6205

    Synology DiskStation Manager (DSM): External Control of File Name or Path

    also in 1 other product

    		8.1
    HighCVE-2022-22684

    Synology DiskStation Manager (DSM): OS Command Injection

    also in 1 other product

    		7.2
    HighCVE-2026-40530

    Synology DiskStation Manager (DSM): CRLF Injection

    also in 1 other product

    		8.0
    HighCVE-2021-29087

    Synology DiskStation Manager (DSM): Path Traversal

    also in 2 other products

    		7.5
    HighCVE-2022-27610

    Synology DiskStation Manager (DSM): Path Traversal

    also in 1 other product

    		6.5
    HighCVE-2021-29084

    Synology DiskStation Manager (DSM): Injection

    also in 2 other products

    		7.5
    CriticalCVE-2025-13392

    Synology DiskStation Manager (DSM): Improper Check for Unusual or Exceptional Conditions

    also in 1 other product

    		8.1
    MediumCVE-2026-40535

    Synology DiskStation Manager (DSM): Path Traversal

    also in 1 other product

    		6.5

    All vulnerabilities in search

    All products by Synology