PT-2026-95325
CVE-2026-40537
·
تاريخ النشر
2026-09-18
·
تاريخ التحديث
2026-09-18
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Synology DiskStation Manager versions prior to 7.2.1-69057-10
Synology DiskStation Manager versions prior to 7.2.2-72806-7
Synology DiskStation Manager versions prior to 7.3.2-86009-2
Description
A server-side request forgery (SSRF) issue exists in the PersonMail API. This allows remote authenticated users to obtain non-sensitive information. SSRF is a flaw where an attacker can induce the server to make requests to an unintended location.
Recommendations
Update to version 7.2.1-69057-10 or later.
Update to version 7.2.2-72806-7 or later.
Update to version 7.3.2-86009-2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾