CVE-2026-3091 in Presto Clientinfo

Zusammenfassung

von MITRE • 24.02.2026

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service during installation by placing a malicious DLL in advance in the same directory as the installer.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Zuständig

Synology

Reservieren

24.02.2026

Veröffentlichung

24.02.2026

Moderieren

akzeptiert

Eintrag

VDB-347503

CPE

bereit

EPSS

0.00006

KEV

nein

Aktivitäten

low

Quellen

Do you need the next level of professionalism?

Upgrade your account now!