Synology stale DNS allows practical interception of traffic from vulnerable DSM clients

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-07-23 02:02 UTC
Importiert: 2026-07-23 03:15 UTC
Quelle-ID: full_disc
uid_hash: eccf09e5dd6488fdca8d7d60e51962bdc3575beae1b82536abb2a64d4d922cf8

Full Disclosure

Posted by shed riot on Jul 22

vulnerable DSM clients

Vendor case: 904909

Suggested severity: High

Synology customers using the affected DSM and Relayd versions listed below

should upgrade immediately.

The relevant man-in-the-middle vulnerabilities were fixed in DSM

6.2.3-25426 Update 3. Customers should install the latest DSM version

available for their device, and in no case remain on...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss