LOW 2.7 NVD

CVE-2026-13683

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in EventScheduler API in Synology DiskStation Manager (DSM

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in EventScheduler API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users with administrator privileges to obtain non-sensitive information.

References

https://www.synology.com/en-global/security/advisory/Synology_SA_26_13

Published: 2026-09-18 · Source: NVD · Feed updated: 2026-09-18

This low severity vulnerability with a CVSS score of 2.7 was published on 2026-09-18 via NVD.

vulnfeed aggregates 14509 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.