CVE-2026-15201
MEDIUM
NVD
CVSS Score
5.9
Severity
MEDIUM
Published
Nov 12, 2026
Vendor
unknown
Description
An improper certificate validation vulnerability in the Support Form in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows man-in-the-middle attackers to read arbitrary files and write specific files during support form submission.