Synology discloses remote attack flaws in NAS software

Image: TechSpot

Published Thursday, November 12, 2026 · 1:19 PM EST

Synology has disclosed two vulnerabilities that allow remote attacks without authentication against its DiskStation Manager storage software, TechSpot reports. CVE-2026-76954, an SQL injection flaw in the authentication interface, carries a 9.8 severity score and can allow arbitrary file reads, file writes or denial of service. CVE-2026-85101 affects the rsync tool and can bypass authentication to read specific files, write arbitrary files or cause limited denial of service. Synology released fixes in October for DSM 7.4, 7.3, 7.2.2 and 7.2.1; devices using manual updates may still need patching.

Sources

TechSpot

Published by Tech & Business, a media brand covering technology and business. This story was sourced from TechSpot and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Capital AI

Norwest raises $4 billion fund targeting AI startups and overlooked sectors

Wells Fargo & Co.-backed Norwest has raised $4 billion for its latest investment fund, Bloomberg reported. The fund will target early-stage AI startups alongside deals in sectors other investors have overlooked. The firm plans to announce the fund Thursday.

Infrastructure

Rowan raises about $1.5 billion to advance data center projects

Rowan Digital Infrastructure raised about $1.5 billion in fresh financing from lenders including Citigroup, Bloomberg reported. The Blackstone-backed data center developer is seeking to advance its growing pipeline of projects with the new financing from lenders.

Capital AI

Orakl Oncology raises $34M to expand cancer drug prediction platform

Paris-based Orakl Oncology has raised a $34M Series A co-led by Norrsken VC and Singular, bringing total funding to $50M.

Capital Infrastructure

Mount Thor raises $45 million for Apple silicon cloud infrastructure

Mount Thor announced $45 million in Seed and Series A funding to expand cloud infrastructure built on Apple silicon. CRV and Conviction co-led the Series A; Chad Byers and Offline Ventures co-led the Seed.

Capital

Nebuly raises $21 million to measure the economic value of AI agents

Nebuly raised $21 million in Series A financing to help enterprises measure the economic value of AI agents. Planven led the round for the startup, which is based in Turin and New York.

Capital AI

Axle raises $9M for investment bank meeting software and AI agents

Axle raised $9M in a round led by Eniac and Bonfire Ventures, with Teamworthy Ventures also participating, the startup announced Thursday. Its software helps investment banks arrange meetings between investors and company management, analysts and industry experts.