Critical Synology NAS flaws patched
Synology fixed a 9.8-severity SQL injection in its login system and a separate rsync flaw, both allowing unauthenticated access.
What we know
A cybersecurity news account reports the flaws let attackers read and write any file without logging in, and that Synology patched both today.
How the story developed
Synology fixed a 9.8-severity SQL injection in its login system and a separate rsync flaw, both allowing unauthenticated access.
Synology fixed a 9.8-severity SQL injection in its login system and an rsync authentication bypass.
What people are posting
Posts on X this story draws on. They are individual users' views and have not been verified by Global Eye 24.
“Synology patched both today. Update ASAP.”
View post →By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.