CVE-2021-26566: Infoleak
Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary commands via inbound QuickConnect traffic.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-26566?
CVE-2021-26566 is a vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 that allows man-in-the-middle attackers to execute arbitrary commands via inbound QuickConnect traffic.
What software is affected by CVE-2021-26566?
The software affected by CVE-2021-26566 is Synology DiskStation Manager (DSM) before version 6.2.3-25426-3.
What is the severity of CVE-2021-26566?
CVE-2021-26566 has a severity value of 9, indicating it is critical.
How can the vulnerability in CVE-2021-26566 be exploited?
The vulnerability in CVE-2021-26566 can be exploited by man-in-the-middle attackers through inbound QuickConnect traffic.
Where can I find more information about CVE-2021-26566?
You can find more information about CVE-2021-26566 in the Synology security advisory and the Talos Intelligence vulnerability report.