EIP-2026-112533

This document details multiple vulnerabilities in Synology PhotoStation, including SQL injection and file disclosure, which can be chained to achieve remote preauth root access. It provides technical analysis, exploitation steps, and proof-of-concept examples.