Beveiligingsadvies

CVE-2026-40541

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-28 07:07:24

Laatst bijgewerkt 2026-08-28 11:44:42

Toegewezen door synology

CVSS-score 9.0

Status PUBLISHED

Beschrijving

An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write arbitrary files and conduct denial-of-service attacks in DSM.

← Alle CVE's bekijken Bekijk op cve.org ↗