CVE-2026-40538lowCWE-307

CVE-2026-40538: low-severity vulnerability in Synology DiskStation Manager (DSM)

Published

Follow this CVE+ Monitor DiskStation Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.7epss 0.4%
An improper restriction of excessive authentication attempts vulnerability in Auto block in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote attackers to read limited files via brute-force attacks.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Synology · DiskStation Manager (DSM)
Related CVEs — Synology DiskStation Manager (DSM)

In the same product, most dangerous first.

CVE-2017-15889—CVE-2017-15889EPSS 73.7%CVE-2024-50629MEDIUMCVE-2024-50629EPSS 31.9%CVE-2022-22687CRITICALCVE-2022-22687EPSS 2.4%CVE-2018-13284HIGHCVE-2018-13284EPSS 2.3%CVE-2021-27649CRITICALCVE-2021-27649EPSS 2.0%CVE-2017-12075HIGHCVE-2017-12075EPSS 1.9%