#Synology
All CosmicBytez Labs articles tagged #Synology, across news, security advisories, how-to guides, and projects.
- News
Synology Warns of C3RB3R Ransomware Attacks Targeting NAS Devices
Synology urges customers to update DSM immediately as C3RB3R ransomware hits NAS devices through a vulnerability patched in late 2024.
- Security
CVE-2026-13639: Insufficient Entropy in Synology DSM Login Lets Unauthenticated Attackers Read/Write Files
A predictable-token flaw in Synology DSM's login logic lets unauthenticated remote attackers read/write files and cause DoS. CVSS 9.8.
- Security
CVE-2026-13684: Improper Output Encoding in Synology DSM SCGI Enables Unauthenticated File Read/Write
An output-encoding flaw in Synology DSM's SCGI component lets unauthenticated attackers read/write files and cause DoS. CVSS 9.8.
- Security
CVE-2026-40541: Cross-Site Scripting Flaw in Synology Chat Server Enables File Tampering
Synology Chat Server's unsanitized link-preview domain lets authenticated users read/write arbitrary DSM files and cause denial-of-service.
- Security
CVE-2025-12686: Synology BeeStation OS Critical Buffer Overflow RCE
Buffer overflow in Synology BeeStation OS AdminCenter lets unauthenticated attackers execute code remotely (CVSS 9.8) — patch to 1.3.2-65648 now.