CVE-2026-85101

Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager (DSM) versions prior to 7.2.1-69057-13 Synology DiskStation Manager (DSM) versions prior to 7.2.2-72806-10 Synology DiskStation Manager (DSM) versions prior to 7.3.2-86009-5 Synology DiskStation Manager (DSM) versions prior to 7.4.1-90080-1

Description An authentication bypass exists in the rsync component, allowing remote attackers to bypass security checks using an alternate path or channel. This flaw enables unauthorized users to read specific files, write arbitrary files, and conduct limited denial-of-service attacks.

Recommendations Update to version 7.2.1-69057-13 or later. Update to version 7.2.2-72806-10 or later. Update to version 7.3.2-86009-5 or later. Update to version 7.4.1-90080-1 or later.