Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Synology | DiskStation Manager (DSM) | affected |
|
No data.
No data.
| Vendor | Product | Confidence | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Synology | Diskstation Manager | 100% |
|
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Sat, 14 Nov 2026 00:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | DSM Content Extraction Path Traversal Allows Authenticated File Read |
Fri, 13 Nov 2026 10:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Synology
Synology diskstation Manager |
|
| Vendors & Products |
Synology
Synology diskstation Manager |
Thu, 12 Nov 2026 03:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An improper limitation of a pathname to a restricted directory vulnerability in the contentextract in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files. | |
| Weaknesses | CWE-22 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: synology
Published:
Updated: 2026-11-12T03:38:00.755Z
Reserved: 2026-08-17T08:25:41.101Z
Link: CVE-2026-74850
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-11-12T04:17:19.890
Modified: 2026-11-12T18:50:59.773
Link: CVE-2026-74850
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-11-14T00:15:07Z