CVE-2026-6205

HighCVSS 8.1/10Last modified Sep 18, 2026

Description

An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write arbitrary files and conduct denial-of-service attacks.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-73

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Sep 18, 2026
Last modified
Sep 18, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-620509.8Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.CVE-2026-620519.8Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.CVE-2026-620529.8Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.CVE-2026-620539.8Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.CVE-2026-620549.8Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.CVE-2026-620585.3Insertion of Sensitive Information Into Sent Data vulnerability in WPExperts CF7 Apps contact-form-7-honeypot allows Retrieve Embedded SensiCVE-2026-620597.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ultimate Member Ultimate Member ultimaCVE-2026-62065.3The MW WP Form plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.1.2 via the _get_post_propCVE-2026-620607.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in captivateaudio Captivate Sync captivatCVE-2026-620615.3Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allCVE-2026-620628.8Cross-Site Request Forgery (CSRF) vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects ElementoCVE-2026-620635.4Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Contr
CVE-2026-6205: High severity, CVSS 8.1 | Vulnix