CVE-2018-8922: Synology Drive Server

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Improper access control vulnerability in Synology Drive before 1.0.2-10275 allows remote authenticated users to access non-shared files or folders via unspecified vectors.

Affected products

• Synology Drive Server: version 1.0.2-10275 only

Published 2018-06-01. Last modified 2026-06-17.