HIGH

CVE-2026-4793

Synology Assistant 2026-08-03 CVSS v3.1

CVSS

7.3

Description

An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-of-service during installation.

Weakness (CWE)

CWE-276 Incorrect Default Permissions

EPSS Score

0.15%

Probability of exploitation in next 30 days

4.6th percentile

References

https://www.synology.com/en-global/security/advisory/Synology_SA_26_12 Release Notes, Vendor Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE