CVE-2026-2237Disclosure(synology / diskstation_manager)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local users on Windows to obtain sensitive information.

synology CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.synology.com/en-global/security/advisory/Synology_SA_26_01

Weakness type (CWE)

CWE-598

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

diskstation_manager
storage_manager

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

synology

Products

diskstation_managerstorage_manager

3 versions affected across 2 products

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://dailycve.com/synology-storage-manager-information-disclosure-via-get-request-with-sensitive-query-strings-cve-2026-2237-medium-dc-jun2026-85/

Full discourse1 post

DailyCVE@dailycve136d
Disclosure
🟠 Synology Storage Manager, Information Disclosure via GET Request with Sensitive Query Strings, #CVE-2026-2237 (Medium) -DC-Jun2026-85 https://dailycve.com/synology-storage-manager-information-disclosure-via-get-request-with-sensitive-query-strings-cve-2026-2237-medium-dc-jun2026-85/
Post summary
The article announces CVE-2026-2237, a medium‑severity information disclosure flaw in Synology Storage Manager, but does not provide a PoC, exploit code, or patch guidance.
0000055
208 followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	synology	diskstation_manager	7.2.1	-	-
OS	synology	diskstation_manager	7.2.2	-	-
OS	synology	diskstation_manager	7.3	-	-
App	synology	storage_manager	-	-	-

Explore more

Back to dashboard synology CVEs diskstation_manager vulnerabilities