CVE-2021-43926

Summary

CVE-2021-43926 is a vulnerability affecting Synology DiskStation Manager (DSM) versions prior to 7.0.1-42218-2. This issue involves an SQL Injection vulnerability in the Log Management functionality. Attackers can exploit this flaw by injecting malicious SQL commands via unspecified vectors, potentially gaining unauthorized access to sensitive data or even executing arbitrary code on the affected system. This poses a significant risk to data confidentiality and integrity. System administrators are advised to update their DSM installations as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.