{"id":"CVE-2026-124993","kind":"vulnerability","aliases":["CVE-2026-124993"],"related":[],"title":"Synology DSM: Security Advisor flaw lets remote attackers read specific files","description":"An incorrect authorization vulnerability in the Security Advisor in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to read specific files.","summary":"An incorrect authorization check in the Security Advisor component of Synology DiskStation Manager lets remote attackers read certain files. The sources give a CVSS score of 5.3 (medium) and report no known exploitation.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dsm","infrastructure","nas","self-hosted","synology"],"not_affected_if":["dsm-already-patched"],"how_to_check":"- Open DSM and check the installed version under Control Panel > Info Center; compare it with the fixed versions listed in the fix section.","fix":"- Synology DSM 7.3 branch: `7.3.2-86009-5` or later\n- Synology DSM 7.4 branch: `7.4.1-90080-1` or later","status":"open","published_at":"2026-11-12T04:17:17+00:00","first_seen_at":"2026-11-12T04:47:08+00:00","triaged_at":"2026-11-12T04:48:00+00:00","updated_at":"2026-11-12T04:48:00+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-12T04:48:00Z","model":"claude-haiku-5-5","output":{"fix":"- Synology DSM 7.3 branch: `7.3.2-86009-5` or later\n- Synology DSM 7.4 branch: `7.4.1-90080-1` or later","reach":"internet","title":"Synology DSM: Security Advisor flaw lets remote attackers read specific files","impact":"low","summary":"An incorrect authorization check in the Security Advisor component of Synology DiskStation Manager lets remote attackers read certain files. The sources give a CVSS score of 5.3 (medium) and report no known exploitation.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["synology","dsm","self-hosted","nas"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"remote attacker reads specific files on the NAS","analyst_note":"","how_to_check":"- Open DSM and check the installed version under Control Panel > Info Center; compare it with the fixed versions listed in the fix section.\n- unknown for any other check: the sources do not say which files are exposed.","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["dsm-already-patched"],"who_is_affected":"Owners of Synology DiskStation NAS devices running DSM before the fixed versions. The sources do not say whether the Security Advisor must be enabled or whether the flaw is reachable only when remote access is turned on.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000722,"input_tokens":4533,"output_tokens":537,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-1':78C '-124993':14A,17A '-2026':13A,16A '-5':74C '-86009':73C '-90080':77C '5.3':51B '7.3.2':72C '7.4.1':76C 'advisor':4A,32B,65C 'allow':79C 'attack':8A,40B,81C 'author':27B,60C 'certain':42B 'check':28B 'compon':33B 'cve':12A,15A 'cvss':48B 'diskstat':36B,68C 'dsm':2A,18B,70C 'exploit':57B 'file':11A,43B,85C 'flaw':5A 'give':46B 'host':23B 'incorrect':26B,59C 'infrastructur':19B 'known':56B 'let':6A,38B 'manag':37B,69C 'medium':52B 'nas':20B 'read':9A,41B,83C 'remot':7A,39B,80C 'report':54B 'score':49B 'secur':3A,31B,64C 'self':22B 'self-host':21B 'sourc':45B 'specif':10A,84C 'synolog':1A,24B,35B,67C 'vulner':61C","nicknames":[],"mitigations":[],"who_affected":"Owners of Synology DiskStation NAS devices running DSM before the fixed versions. The sources do not say whether the Security Advisor must be enabled or whether the flaw is reachable only when remote access is turned on.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dsm","infrastructure","medium","nas","selfhosted","synology"],"campaign_type":null,"search_a":"'-124993':14A,17A '-2026':13A,16A 'advisor':4A 'attack':8A 'cve':12A,15A 'dsm':2A 'file':11A 'flaw':5A 'let':6A 'read':9A 'remot':7A 'secur':3A 'specif':10A 'synolog':1A","search_b":"'5.3':51B 'advisor':32B 'attack':40B 'author':27B 'certain':42B 'check':28B 'compon':33B 'cvss':48B 'diskstat':36B 'dsm':18B 'exploit':57B 'file':43B 'give':46B 'host':23B 'incorrect':26B 'infrastructur':19B 'known':56B 'let':38B 'manag':37B 'medium':52B 'nas':20B 'read':41B 'remot':39B 'report':54B 'score':49B 'secur':31B 'self':22B 'self-host':21B 'sourc':45B 'synolog':24B,35B","search_c":"'-1':78C '-5':74C '-86009':73C '-90080':77C '7.3.2':72C '7.4.1':76C 'advisor':65C 'allow':79C 'attack':81C 'author':60C 'diskstat':68C 'dsm':70C 'file':85C 'incorrect':59C 'manag':69C 'read':83C 'remot':80C 'secur':64C 'specif':84C 'synolog':67C 'vulner':61C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T04:17:17+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss_by":"security@synology.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124993","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124993","severity":null,"published_at":"2026-11-12T04:17:17+00:00","modified_at":"2026-11-12T04:17:17+00:00","first_seen_at":"2026-11-12T04:47:08+00:00","fetched_at":"2026-11-12T04:47:08+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}