Synology NAS

productDE

cpe:/h:synology:nas:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

2critical2high9medium2low

updated 2026-10-27

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-25216US	critical9.8	83.0% (100th)	—	no fix	2021-04-29	—
CVE-2020-11264US	critical9.8	13.2% (96th)	—	no fix	2021-09-08	—
CVE-2021-25215US	high7.5	11.8% (96th)	—	no fix	2021-04-29	—
CVE-2020-11301US	high7.5	11.1% (96th)	—	no fix	2021-09-08	—
CVE-2020-26147US	medium5.4	7.60% (95th)	—	no fix	2021-05-11	—
CVE-2020-26139US	medium5.3	6.49% (94th)	—	no fix	2021-05-11	—
CVE-2021-25214US	medium6.5	6.28% (94th)	—	no fix	2021-04-29	—
CVE-2020-24586US	low3.5	5.76% (93rd)	—	no fix	2021-05-11	—
CVE-2020-26146US	medium5.3	5.62% (93rd)	—	no fix	2021-05-11	—
CVE-2020-26144US	medium6.5	4.91% (92nd)	—	no fix	2021-05-11	—
CVE-2020-26143US	medium6.5	4.17% (91st)	—	no fix	2021-05-11	—
CVE-2020-26141US	medium6.5OT elevated	3.07% (88th)	—	no fix	2021-05-11	—
CVE-2020-26140US	medium6.5OT elevated	2.92% (87th)	—	no fix	2021-05-11	—
CVE-2020-24587US	low2.6OT elevated	2.59% (85th)	—	no fix	2021-05-11	—
CVE-2020-26142US	medium5.3	2.08% (81st)	—	no fix	2021-05-11	—

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation5 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')4 CVEs
CWE-287Improper Authentication3 CVEs
CWE-617Reachable Assertion3 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts2 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm2 CVEs
CWE-346Origin Validation Error2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.