CVEvulnerability
CVE-2026-4793
7.3 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-08-03
- Last modified
- 2026-10-23
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.3 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.3 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-276
Description
An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-of-service during installation.
Affected configurations
• synology assistant (< 7.0.7-50095)
Related
Weakness · CWE (1)
- CWE-276 Incorrect Default Permissions weakness
References
- https://www.synology.com/en-global/security/advisory/Synology_SA_26_12 Release Notes, Vendor Advisory