[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvZWcELD87AF99NiCPOANJR81yUDViFPYT90rDPn5mC0":3,"g5a-family:synology\u002Fskynas_firmware":97,"g5a-ex:synology\u002Fskynas_firmware@*":98},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":69,"seoMetadata":75,"meta":94},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":17},"synology","skynas_firmware",1,13,"2021-02-26",[13],{"version":14,"cve_count":15,"kev_count":15,"has_kev":16},"6.2.3-25426",0,false,"Skynas Firmware by Synology is a technology product with 1 tracked version and 13 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":14,"cve_count":15,"kev_count":15,"has_kev":16},[21,29,35,39,44,48,53,57,61,65],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":4,"epssScore":28},"CVE-2021-3156","Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.","2021-01-26",7.8,"v3.1","High",0.99962,{"cveId":30,"description":31,"publishedDate":11,"cvssScore":32,"cvssVersion":26,"severity":33,"isKev":16,"epssScore":34},"CVE-2021-26561","Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via syno_finder_site HTTP header.",9,"Critical",0.02061,{"cveId":36,"description":37,"publishedDate":11,"cvssScore":32,"cvssVersion":26,"severity":33,"isKev":16,"epssScore":38},"CVE-2021-26562","Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via syno_finder_site HTTP header.",0.01898,{"cveId":40,"description":41,"publishedDate":11,"cvssScore":42,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":43},"CVE-2021-26566","Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary commands via inbound QuickConnect traffic.",8.3,0.01508,{"cveId":45,"description":46,"publishedDate":11,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":47},"CVE-2021-26567","Stack-based buffer overflow vulnerability in frontend\u002Fmain.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options.",0.01129,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":42,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":52},"CVE-2020-27652","Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via unspecified vectors.","2020-10-29",0.00832,{"cveId":54,"description":55,"publishedDate":11,"cvssScore":32,"cvssVersion":26,"severity":33,"isKev":16,"epssScore":56},"CVE-2021-26560","Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session.",0.00766,{"cveId":58,"description":59,"publishedDate":11,"cvssScore":42,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":60},"CVE-2021-26565","Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to obtain sensitive information via an HTTP session.",0.00742,{"cveId":62,"description":63,"publishedDate":51,"cvssScore":42,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":64},"CVE-2020-27648","Improper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.",0.00719,{"cveId":66,"description":67,"publishedDate":11,"cvssScore":42,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":68},"CVE-2021-26564","Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session.",0.00668,[70],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"severity":27,"isKev":4,"epssScore":28,"cisaVulnName":71,"cisaDateAdded":72,"cisaShortDescription":73,"cisaRequiredAction":74},"Sudo Heap-Based Buffer Overflow Vulnerability","2022-04-06","Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.","Apply updates per vendor instructions.",{"title":76,"metaDescription":77,"keywords":78,"structuredData":79},"Skynas Firmware by Synology - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Skynas Firmware by Synology covering 1 version with 13 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Skynas Firmware vulnerabilities, Skynas Firmware security, Skynas Firmware CVE, Synology Skynas Firmware, Skynas Firmware threat intelligence, Synology security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Skynas Firmware KEV, Skynas Firmware exploited vulnerabilities",{"@context":80,"@type":81,"name":82,"description":77,"url":83,"manufacturer":84,"applicationCategory":88,"softwareVersion":89,"mainEntity":90},"https:\u002F\u002Fschema.org","SoftwareApplication","Skynas Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsynology\u002Fskynas_firmware",{"@type":85,"name":86,"url":87},"Organization","Synology","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsynology","Security Software","1 versions tracked",{"@type":91,"name":92,"description":93,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Skynas Firmware Security Vulnerabilities","Security vulnerabilities affecting Skynas Firmware by Synology",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":95,"apiVersion":96},"2026-10-17T19:29:56.987Z","3.0",[],{"rows":99,"total":9,"capped":16,"failed":15},[100],{"cveId":22,"name":71,"severity":27,"cvss":25,"added":72,"epss":28,"published":101,"ranges":102,"checked":4,"hits":103,"covers":16},"2021-01-26T21:15:12.987",[],[]]