CVE-2021-26560

Summary

CVE-2021-26560 is a cleartext transmission vulnerability affecting Synology DiskStation Manager (DSM) before version 6.2.3-25426-3. This issue allows man-in-the-middle attackers to spoof servers and intercept sensitive information during an HTTP session due to the unencrypted transmission of data. The vulnerability poses a significant risk as it enables unauthorized access to confidential data, increasing the likelihood of data breaches or unauthorized modifications. It is crucial for Synology users to update their DSM to the latest version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.