CVE-2026-9548 in Chat Serverinformación

Resumen

por MITRE • 2026-08-28

An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write restricted files and conduct limited denial-of-service attacks in DSM.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Synology

Reservar

2026-05-26

Divulgación

2026-08-28

Moderación

aceptado

Artículo

VDB-396659

CPE

listo

EPSS

0.00241

KEV

no

Actividades

bajo

Sector

Hostingprovider, Telecommunication, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-9548
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-9548
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-9548/

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!