Synology Product Security Update Advisory
A security update has been released to address several vulnerabilities in Synology products, particularly DiskStation Manager (DSM). The vulnerabilities addressed include an SQL injection vulnerability (CVE-2026-76954, CVE-2026-81584), a privilege escalation vulnerability that is bypassed via user-controlled keys (CVE-2026-13672), Path traversal vulnerabilities (CVE-2026-18792), a vulnerability involving the omission of a required
