← Back to browse · API

CVE-2021-27646

Severity
CRITICAL
CVSS
9.8
EPSS
0.03786
Risk score
40.53
CISA KEV
No
PoC
No
Published
2021-03-12
Modified
2024-09-16
First seen
2026-08-07
Aliases
EUVD-2021-14392, GHSA-QM39-44MJ-VQVQ
Products
Synology:Synology DiskStation Manager (DSM) unspecified <6.2.3-25426-3
Sources
euvd EUVD-2021-14392

Description

Use After Free vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests.

References