CVE-2026-85098: Medium severity vulnerability

Published Nov 12, 2026

Updated

A reachable assertion vulnerability in the synoscgi in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to conduct limited denial-of-service attacks.

Event History

Nov 12, 2026

CVE Published

via MITRE·03:37 AM

Data Sourced

via MITRE·03:37 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which DSM versions need to be remediated?

DSM versions before 7.3.2-86009-5 and before 7.4.1-90080-1 are affected.

Can this be exploited remotely without authentication or user interaction?

Yes. The CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

What is the expected impact of exploitation?

The vulnerability allows limited denial-of-service attacks. The provided severity data indicates availability impact only, with no stated confidentiality or integrity impact.

CVE-2026-85098: Medium severity vulnerability

Event History

Frequently Asked Questions

Which DSM versions need to be remediated?

Can this be exploited remotely without authentication or user interaction?

What is the expected impact of exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which DSM versions need to be remediated?

Can this be exploited remotely without authentication or user interaction?

What is the expected impact of exploitation?