CVE-2022-27618: Synology Storage Analyzer

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Storage Analyzer before 2.1.0-0390 allows remote authenticated users to delete arbitrary files via unspecified vectors.

Affected products

• Synology Storage Analyzer: before 2.1.0-0390 (fixed in 2.1.0-0390); before 2.0.1-0214 (fixed in 2.0.1-0214)

Published 2022-08-03. Last modified 2026-06-17.