CVE-2026-2237 — Synology / Storage Manager

CVE-2026-2237

Synology / Storage Manager PUBLISHED

Description (CNA)

A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local users on Windows to obtain sensitive information.

Affected (CNA)

Vendor / product	Versions
Synology / Storage Manager	affected * before 1.0.1-1100

CWE

CWE-598

References

https://www.synology.com/en-global/security/advisory/Synology_SA_26_01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.