CVE-2026-18633: High severity vulnerability

Published Nov 12, 2026

Updated

An access of uninitialized pointer vulnerability in the nfsd in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to conduct denial-of-service attacks.

Event History

Nov 12, 2026

CVE Published

via MITRE·03:33 AM

Data Sourced

via MITRE·03:33 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which DSM versions need remediation?

DSM versions before 7.3.2-86009-5 and before 7.4.1-90080-1 are affected. Systems on either affected version track should be updated to the corresponding fixed build.

Can this be exploited remotely without credentials or user interaction?

Yes. The listed vector is network-accessible with low attack complexity, no privileges required, and no user interaction required.

What is the expected impact of exploitation?

The stated impact is denial of service. The severity vector indicates high availability impact, with no listed confidentiality or integrity impact.

CVE-2026-18633: High severity vulnerability

Event History

Frequently Asked Questions

Which DSM versions need remediation?

Can this be exploited remotely without credentials or user interaction?

What is the expected impact of exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which DSM versions need remediation?

Can this be exploited remotely without credentials or user interaction?

What is the expected impact of exploitation?