CVE-2021-33184: Synology Download Station

High severity, CVSS 7.7. EPSS: 1% chance of exploitation in the next 30 days.

Server-Side request forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors.

Affected products

• Synology Download Station: before 3.8.15-3563 (fixed in 3.8.15-3563)

Published 2021-06-01. Last modified 2026-06-17.