CVE-2021-34811: Synology Download Station

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors.

Affected products

• Synology Download Station: before 3.8.16-3566 (fixed in 3.8.16-3566)

Published 2021-06-18. Last modified 2026-06-17.