Vulnerability Spotlight: Multiple vulnerabilities in Synology Disk Station Manager
Summary: Cisco Talos discovered multiple vulnerabilities in Synology DiskStation Manager, the Linux-based operating system for Synology NAS devices, affecting features including AppArmor and QuickConnect. TALOS-2020-1173 and TALOS-2020-1160 (CVE-2021-26564, CVE-2021-26565, CVE-2021-26566) are information disclosure flaws that could let an attacker steal sensitive login credentials, including an administrator's, while TALOS-2020-1159 (CVE-2021-26560, CVE-2021-26561, CVE-2021-26562) allows remote code execution as root via a man-in-the-middle technique, and TALOS-2020-1158 (CVE-2021-26563) bypasses AppArmor restrictions and can be combined with TALOS-2020-1159 to run arbitrary code as root without restrictions.
What's compelling: An attacker who steals administrator credentials or chains the AppArmor bypass with the man-in-the-middle flaw can execute arbitrary code as root on the NAS, and Talos confirmed the exploit against DSM version 6.2.3 25426-2 DS120j.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-26560CVE-2021-26561CVE-2021-26562CVE-2021-26563CVE-2021-26564CVE-2021-26565CVE-2021-26566
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026