---
id: "CVE-2026-75785"
page: "https://infrastack.ai/live/CVE-2026-75785"
kind: "vulnerability"
aliases: ["CVE-2026-75785"]
title: "Synology DSM: VPN API command injection lets admins read and write files"
severity: "high"
cvss: 7.2
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["dsm", "infrastructure", "nas", "synology", "vpn"]
not_affected_if: ["no-admin-exposure", "patched-dsm"]
published_at: "2026-11-12T04:17:20+00:00"
first_seen_at: "2026-11-12T04:47:09+00:00"
updated_at: "2026-11-12T04:47:48+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75785", "first_seen_at": "2026-11-12T04:47:09+00:00"}]
exploit_sources: []
---

# Synology DSM: VPN API command injection lets admins read and write files

Link for people: https://infrastack.ai/live/CVE-2026-75785 (this .md is for agents)

An OS command injection flaw in the VPN API of Synology DiskStation Manager lets an authenticated administrator read or write arbitrary files and cause denial of service. The sources rate it high (CVSS 7.2) and give fixed versions 7.3.2-86009-5 and 7.4.1-90080-1 for the affected DSM branches.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed DSM version in the DSM web interface under Control Panel > Info Center.
- Compare it with the fixed versions `7.3.2-86009-5` and `7.4.1-90080-1`; older builds on those branches are affected.

## Fix

- Synology DSM: upgrade to `7.3.2-86009-5` or `7.4.1-90080-1` (the fixed version on your branch).

## Timeline

- 2026-11-12T04:47:09+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-75785

## From the sources

An improper neutralization of special elements used in an OS command vulnerability in the VPN API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users with administrator privileges to read or write arbitrary files and conduct denial-of-service attacks.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_