EIP-2026-103324
PRE-CVESynology DiskStation Manager (DSM) 4.3-3776 - Multiple Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-103324. PoCs published by Andrea Fabrizi.
AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in Synology DSM, including arbitrary file download via path traversal, command injection with root privileges, and partial remote content download via buffer overflow. The PoC provides clear examples of HTTP requests to exploit these flaws.
Description
Synology DiskStation Manager (DSM) 4.3-3776 - Multiple Vulnerabilities
Exploits (1)
This exploit demonstrates multiple vulnerabilities in Synology DSM, including arbitrary file download via path traversal, command injection with root privileges, and partial remote content download via buffer overflow. The PoC provides clear examples of HTTP requests to exploit these flaws.