This is a concise English summary, not a full translation. The original long-form Persian analysis discusses Synology DSM Auth API SQL injection. Please consult the official sources linked below for precise product specifications, technical updates, release availability, or vulnerability advisories.
Synology DSM Auth API SQL injection — Security Advisories
A Persian technical report on Synology DSM Auth API SQL injection with links to the original references and a source-attributed editorial analysis.
IdentifierCVE-2026-76954
Vendor / product— / Synology DSM Auth API SQL injection
Severity scoreNot available in reviewed source
Added to CISA KEV—
A KEV listing indicates evidence of real-world exploitation—not that every installation is compromised. Check your version, configuration and the vendor’s advisory.
Sources & further reading
01منبع اصلی، پژوهش یا بولتن رسمیhttps://nvd.nist.gov/vuln/detail/CVE-2026-76954
↗02مرجع تکمیلی یا مستندات مرتبطhttps://cveawg.mitre.org/api/cve/CVE-2026-76954
↗03مرجع CNA/CVE رسمیhttps://cveawg.mitre.org/api/cve/CVE-2026-76954
↗04لینک تأییدشده در رکورد رسمی CVEhttps://www.synology.com/en-global/security/advisory/Synology_SA_26_19
↗IROSG / EDITORIAL
News and pioneer profiles use original writing with source attribution. Image credits and licenses are kept in each page’s sources section instead of beneath the images. CVE reference data credits its primary sources.
Editorial and image policy ↗
