Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service during installation by placing a malicious DLL in advance in the same directory as the installer.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3091 Synology Presto Client Local File Read/Write Vulnerability via Uncontrolled Search Path https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3091
Post summary
The text references CVE-2026-3091, a local file read/write vulnerability in Synology Presto Client due to uncontrolled search path, but provides no PoC, exploit, patch, or active exploitation details.
CVE-2026-3091 An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files during installation by… https://www.cve.org/CVERecord?id=CVE-2026-3091
Post summary
CVE-2026-3091 is an uncontrolled search path element vulnerability in Synology Presto Client that permits local users to read or write arbitrary files during installation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | synology | presto_client | - | - | - |