s
synology
Security Risk Profile
49
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 470 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 29, 2010 to present
470
Total CVEs
218
Critical+High
5
Exploited
180
Unpatched
Threat Assessment
Avg CVSS
7.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
180
Critical/High
Risk Level
49/100
medium
⚠️ 5 Active Exploits⚡ 3 Zero-Days📈 3 in Last 30 Days
Severity Distribution
Critical
66High
152Medium
179Low
9Exploit Likelihood
>50% chance
020-50%
05-20%
1<5%
30Age Distribution
Common Weaknesses (CWE)
1
XSS
55
2
Path Traversal
48
3
SQL Injection
25
4
Infoleak
25
5
Command Injection
22
Most Affected Products
1. Synology Router Manager290
2. Synology Diskstation Manager277
3. VMware ESXi213
4. Intel Core I5169
5. Intel Core I7168
Recent Vulnerabilities
See more →CVE-2026-9548
CVSS 6.5EPSS 0%medium
Aug 28, 2026🔧 No Patch
CVE-2026-9491
CVSS 4.3EPSS 0%medium
Aug 28, 2026🔧 No Patch
CVE-2026-40541
CVSS 9.0critical
Aug 28, 2026🔧 No Patch
CVE-2026-4793
CVSS 7.8high
Aug 3, 2026🔧 No Patch
ZDI-CAN-28485
unknown
ZDI-26-424: Synology DiskStation DS925+ MailPlus Improper Restriction of Communication Channel to Intended Endpoints Vulnerability
Jul 15, 2026🔧 No Patch
ZDI-26-423
unknown
Synology DiskStation DS925+ MailPlus Redis Weak Cryptography for Passwords Remote Code Execution Vulnerability
Jul 15, 2026🔧 No Patch
ZDI-CAN-28554
unknown
ZDI-26-423: Synology DiskStation DS925+ MailPlus Redis Weak Cryptography for Passwords Remote Code Execution Vulnerability
Jul 15, 2026🔧 No Patch
CVE-2026-26240
CVSS 1.3low
File Station 5
Jun 10, 2026🔧 No Patch
CVE-2026-26241
CVSS 1.3low
File Station 5
Jun 10, 2026🔧 No Patch
CVE-2026-24724
CVSS 6.2medium
File Station 5
Jun 10, 2026🔧 No Patch
Monitor synology in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.