Vulnerability Spotlight: Multiple vulnerabilities in Synology SRM (Synology Router Manager)
Summary: Cisco Talos discovered multiple vulnerabilities in Synology Router Manager (SRM) and its QuickConnect feature, which an attacker could chain to gain unconstrained root privileges on affected routers, including remotely and without authentication on any router connected to the QuickConnect VPN. Talos reported the issues to Synology, which released updates, and one vulnerability also affected the Qualcomm LBD service, for which Qualcomm released an update.
What's compelling: TALOS-2020-1058 lets an attacker steal QuickConnect VPN credentials, and TALOS-2020-1064 shows the VPN's subnets are not logically split, so a single attacker who changes their netmask can reach any other router on the same VPN - turning one compromised credential into access across many organizations' routers.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026