ZDI-26-187 CRITICAL 9.8 Published Mar 16, 2026

Synology DiskStation Manager Netatalk Library Buffer Overflow Remote Code Execution Vulnerability

Synology

Synology DiskStation Manager contains a critical remote code execution vulnerability (CVE-2022-45188) with a CVSS score of 9.8 that requires no authentication to exploit. An attacker can leverage this flaw to execute arbitrary code and gain complete control over affected NAS systems. Security teams should immediately prioritize patching all vulnerable Synology DiskStation Manager installations and consider implementing network segmentation to limit exposure until updates are applied.

Related CVE

CVE-2022-45188

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy