CVE Intelligence

Synology Synology Chat Server vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Synology Synology Chat Server: 3 record(s), with affected versions and fixes.

CVE-2026-9548 Medium · 6.5 CWE-79 Aug 28, 2026
Cross-site Scripting (XSS) in Synology Synology Chat Server
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write restricted files and conduct limited denial-of-service attacks in DSM.
CVE-2026-9491 Medium · 4.3 CWE-918 Aug 28, 2026
Server-Side Request Forgery (SSRF) in Synology Synology Chat Server
A server-ide request forgery (SSRF) vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote authenticated users to obtain non-sensitive information.
CVE-2026-40541 Critical · 9.0 CWE-79 Aug 28, 2026
Cross-site Scripting (XSS) in Synology Synology Chat Server
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write arbitrary files and conduct denial-of-service attacks in DSM.