[{"data":1,"prerenderedAt":39},["ShallowReactive",2],{"sicherheitsluecke-cve-2026-75785":3},{"l":4,"details":22,"weitere":25,"indexierbar":10,"updated":38},{"cve":5,"status":6,"vendor":7,"product":8,"name":7,"added":9,"due":7,"ransomware":10,"published":9,"cwes":11,"cvss":13,"slug":18,"bereich":19,"schweregrad":20,"art":21,"produktLabel":8},"CVE-2026-75785","gemeldet","","Synology DiskStation Manager","2026-11-12",false,[12],"CWE-78",{"version":14,"score":15,"severity":16,"vector":17},"3.1",7.2,"HIGH","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","cve-2026-75785","it","hoch","Einschleusen von Betriebssystem-Befehlen (OS Command Injection)",{"description":23,"refs":24},"An improper neutralization of special elements used in an OS command vulnerability in the VPN API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users with administrator privileges to read or write arbitrary files and conduct denial-of-service attacks.",[],[26,31,35],{"cve":27,"status":6,"produktLabel":8,"vendor":7,"product":8,"art":28,"bereich":19,"schweregrad":29,"score":30,"epss":-1,"added":9,"ransomware":10},"CVE-2026-76954","Einschleusen von Datenbankbefehlen (SQL-Injection)","kritisch",9.8,{"cve":32,"status":6,"produktLabel":8,"vendor":7,"product":8,"art":33,"bereich":19,"schweregrad":20,"score":34,"epss":-1,"added":9,"ransomware":10},"CVE-2026-13672","Zugriff auf fremde Datensätze über ihre Kennung (IDOR)",8.8,{"cve":36,"status":6,"produktLabel":8,"vendor":7,"product":8,"art":37,"bereich":19,"schweregrad":20,"score":34,"epss":-1,"added":9,"ransomware":10},"CVE-2026-18792","Zugriff auf Dateien außerhalb des erlaubten Ordners (Path Traversal)","2026-11-12T13:05:11.283Z",1794488740388]