CVE-2026-13639

Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager versions prior to 7.2.1-69057-12 Synology DiskStation Manager versions prior to 7.2.2-72806-9 Synology DiskStation Manager versions prior to 7.3.2-86009-4 Synology DiskStation Manager versions prior to 7.4-90075

Description An insufficient entropy flaw in the login logic allows unauthenticated remote attackers to read or write arbitrary files and trigger a denial-of-service state. Entropy refers to the randomness collected for use in cryptographic operations; insufficient entropy makes values predictable, which in this case compromises the login security.

Recommendations Update to version 7.2.1-69057-12. Update to version 7.2.2-72806-9. Update to version 7.3.2-86009-4. Update to version 7.4-90075.