CVE-2026-9491

Synology / Synology Chat Server PUBLISHED

Description (CNA)

A server-ide request forgery (SSRF) vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote authenticated users to obtain non-sensitive information.

Affected (CNA)

Vendor / product	Versions
Synology / Synology Chat Server	affected * before 2.4.5-22148

CWE

CWE-918

References

https://www.synology.com/en-global/security/advisory/Synology_SA_26_10

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.