CVE-2026-2237: Synology Storage Manager

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local users on Windows to obtain sensitive information.

Affected products

• Synology Storage Manager: before 1.0.1-1100 (fixed in 1.0.1-1100)

Published 2026-05-27. Last modified 2026-06-17.