CVE-2021-26563

PoC —

CVSS 3.1

6.7 medium

EPSS

<1%p42

Published

Feb 26, 2021 (Feb 26, 2021)

Modified

Jun 17, 2026

Description

Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors.

Vendors: synology
Products: diskstation manager, vs960hd firmware, skynas firmware, diskstation manager unified controller
Weakness: CWE-863
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news1 stories

Vulnerability Spotlight: Multiple vulnerabilities in Synology DiskStation Manager

Cisco TalosApr 20, 13:00 UTC · Apr 20, 2021Vulnerability in the wildCVE-2021-26564 CVE-2021-26565 CVE-2021-26566+4 CVEs