CVE-2022-27622: Synology Diskstation Manager

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Server-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote authenticated users to access intranet resources via unspecified vectors.

Affected products

• Synology Diskstation Manager: before 7.1-42661 (fixed in 7.1-42661)

Published 2022-10-25. Last modified 2026-06-17.