4
CVEs
0
Critical
1
High
0
KEV
0
PoC
0
Unpatched C/H
75.0%
Patch Rate
0.0%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
1
MEDIUM
3
LOW
0
Monthly CVE Trend
Affected Products (17)
Diskstation Manager
8
Beedrive
4
Active Backup For Business Agent
3
File Station
3
Diskstation Manager Unified Controller
3
Beestation Os
3
Drive Server
2
Cc400W Firmware
1
Memory Corruption
1
Bc500 Firmware
1
Tc500 Firmware
1
Replication Service
1
Unified Controller
1
Presto Client
1
Mail Server
1
Openclaw
1
Active Backup For Microsoft 365
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-31998 | Synology OpenClaw versions 2026.2.22 and 2026.2.23 contain an authorization bypass in the synology-chat channel plugin where misconfigured allowlist policies with empty user IDs fail open, allowing authenticated Synology senders to dispatch unauthorized agents and execute downstream tool actions. The vulnerability requires network access and low-complexity exploitation, with a patch currently available. | HIGH | 8.3 | 0.0% | 42 |
|
| CVE-2026-3091 | Synology Presto Client versions prior to 2.1.3-0672 are vulnerable to DLL hijacking during installation, enabling local attackers with user privileges to read or write arbitrary files by placing malicious libraries in the installer directory. The vulnerability requires user interaction and local access but grants high-impact capabilities including confidentiality and integrity violations. No patch is currently available. | MEDIUM | 6.7 | 0.0% | 34 |
No patch
|
| CVE-2026-32911 | Synology OpenClaw versions prior to 2026.2.24 contain an authorization bypass in the synology-chat channel plugin where misconfigured allowlist policies with empty user IDs fail to enforce access controls. Authenticated attackers with Synology sender privileges can exploit this flaw to send unauthorized messages through downstream agents and tools. A patch is available. | MEDIUM | 6.4 | – | 32 |
|
| CVE-2026-35635 | OpenClaw before 2026.3.22 contains a webhook path route replacement vulnerability in its Synology Chat extension that allows unauthenticated remote attackers to bypass per-account direct message access controls by collapsing multi-account configurations onto shared webhook paths. Attackers can exploit inherited or duplicate webhook paths to replace route ownership across accounts, potentially gaining unauthorized access to account-specific resources. No public exploit code or active exploitation has been confirmed at the time of analysis. | MEDIUM | 6.3 | 0.0% | 32 |
|