# Got a Synology NAS? Time to check your updates, as two high-level vulnerabilities let ne’er-do-wells read and write files and conduct DDOS attacks

- URL: https://talkfuse.com/story/got-a-synology-nas-time-to-check-your-updates-as-two-high-level-vulnerabilities-let-neer-do-wells-read-and-write-files-and-conduct-ddos-attacks/
- Published: 2026-11-11T17:24:05+00:00
- Updated: 2026-11-11T18:42:20+00:00
- Original publisher: PC Gamer
- Original article: https://www.pcgamer.com/hardware/storage/got-a-synology-nas-time-to-check-your-updates-as-two-high-level-vulnerabilities-let-neer-do-wells-read-and-write-files-and-conduct-ddos-attacks/
- Topics: Software, Technology

## Key points

- Synology patched two serious DSM security flaws.
- The top-rated vulnerability scores 9.8 out of 10.
- Users should check that their NAS has updated.

## Summary

Synology has patched two high-severity vulnerabilities in its DiskStation Manager (DSM) software, which runs on its network-attached storage devices. The flaws could let remote attackers access files or disrupt services, making it important for users to check that their NAS devices have received the updates.

The first flaw, an SQL injection in the Auth API, has a CVSS 3 score of 9.8 out of 10 and could allow attackers to read or write arbitrary files or cause denial-of-service attacks. A second vulnerability in rsync is rated 8.6 and could bypass authentication, with similar file-access and service-disruption risks. Synology says fixes have been issued for affected versions; the article also notes that updates may not install automatically.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.