security

The General Data Protection Regulation (GDPR) came into effect almost 10 years ago and has since been enforced more strictly across the European Union. Companies need to comply with GDPR to meet regulatory requirements and safeguard user data. With large companies such as Amazon, Meta, and...

(2026-06-30) Important notes Your Synology NAS may not notify you of this DSM update because of the following reasons. If you want to update your DSM to this version now, please click here to update it manually. The update is not available in your region yet. The update is expected to be...

Synology has released a security update for the Synology MailPlus Server package in DSM to address multiple vulnerabilities : CVE-2026-13136 allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks. CVE-2025-15660 (ZDI-CAN-28554) allows adjacent attackers to...

(2026-06-16) Important Note After installing this update, you will not be able to downgrade to a previous DSM version. This update will restart your Synology NAS. If auto update does not run, perform a manual update in Control Panel. Before updating, follow the instructions and complete the...

(2026-06-11) BeeStation OS 1.5.2 Fixed issues Minor bug fixes and overall system stability enhancement. Fixed security vulnerabilities. Notes: This version is released in a staged rollout.

Version: 1.3.2-9366 Update 2 (2026-06-04) Important Note The update will be available for selected regions within the following weeks, although the release time in each region may vary slightly. Fixed Issues Fixed a security vulnerability. Notes: This version is released in a staged rollout.

Synology has released a security update for the Synology Chat Server package in DSM to address multiple vulnerabilities : CVE-2026-40541 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks. CVE-2026-9491 allows remote authenticated users to...

This seems to be similar to Robbie's post from May 11th. (Brute Force Password Attack - but NAS has no external access set) I've posted this on the Synology site but thought I'd post here as well. In the last 48 hours I’ve had over 6,4000 failed login attempts (from overseas countries) on my...

None of Synology's products are affected by CVE-2026-43284 and CVE-2026-43500. Continue reading... - - - Synology Product Security Advisory: check the list Source: synology.com

None of Synology's products are affected by CVE-2026-31431. Continue reading... - - - Synology Product Security Advisory: check the list Source: synology.com

SRM version 1.3.1-9346 (Update 14) Whether this is down to a misconfiguration on my part or on Synology itself, it is at the very least a major vulnerability, unless someone wants to enlighten me as to why this is expected behaviour. I am using a guest 5G wireless network. No primary or 2.4G...

Synology has released a security update for the DSM to address a vulnerability : CVE-2026-40540 allows remote authenticated users to obtain non-sensitive information. Please refer to the 'Affected Products' table for the corresponding updates. Continue reading... - - - Synology Product Security...

Synology has released a security update for the DSM to address multiple vulnerabilities : CVE-2026-40530, CVE-2026-4036, CVE-2026-40531, CVE-2026-40532, CVE-2026-40534, CVE-2026-40536, CVE-2026-40537 allow remote authenticated users to read or write arbitrary or limited files, conduct...

Synology has released a security update for the Synology SSL VPN Client utility to address vulnerabilities: CVE-2021-47960 allows remote attackers to access sensitive files from the SSL VPN Client installation directory via a local HTTP service when a user interacts with a crafted web page...

Presuming the most secure option would be to encrypt the backup, encrypt in transit and encrypt the folder? That is how I set things up atm. One negative is the need to manually mount the folder if there is a disruption. @Rusty mentioned a script could be created that would auto-mount the...

I’m working on storing time-series data as CSV files on a Synology NAS. The data is generated by a service running inside Docker (e.g. Node-RED), and I’m trying to write this data to a shared folder on the NAS. Current setup: Synology NAS running DSM Docker container (Node-RED or similar)...

Synology has released a security update for the Mail Station package in DSM to address a vulnerability: CVE-2026-5129 allows remote authenticated users to read or write limited files. Please refer to the 'Affected Products' table for the corresponding updates. Continue reading... - - - Synology...

Synology has released a security update for DiskStation Manager (DSM) to address an issue in the telnetd of GNU Inetutils. CVE-2026-32746 may allow unauthenticated remote attackers to execute arbitrary commands. Please refer to the Affected Products table for the corresponding updates. Continue...

I saw this flash up and knowing some people here use Ubiquiti equipment thought I'd just raise it. I don't know if it affects old or new kit nor if it's things people here use, but the CVE score for one is 10.0 out of 10.0. CVE-2026-22557 (base score 10.0) CVE-2026-22558 (base score 7.7)...

(2026-03-19) Important notes Your Synology NAS may not notify you of this DSM update because of the following reasons. If you want to update your DSM to this version now, please click here to update it manually. The update is not available in your region yet. The update is expected to be...