[{"data":1,"prerenderedAt":44},["ShallowReactive",2],{"sicherheitsluecke-cve-2026-81584":3},{"l":4,"details":25,"weitere":28,"indexierbar":10,"updated":43},{"cve":5,"status":6,"vendor":7,"product":8,"name":7,"added":9,"due":7,"ransomware":10,"published":9,"cwes":11,"cvss":13,"epss":18,"slug":21,"bereich":22,"schweregrad":23,"art":24,"produktLabel":8},"CVE-2026-81584","gemeldet","","Synology DiskStation Manager","2026-11-12",false,[12],"CWE-89",{"version":14,"score":15,"severity":16,"vector":17},"3.1",8.1,"HIGH","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"score":19,"percentile":20},0.0056,0.47102,"cve-2026-81584","it","hoch","Einschleusen von Datenbankbefehlen (SQL-Injection)",{"description":26,"refs":27},"An improper neutralization of special elements used in an SQL command vulnerability in the User API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers with control over a compromised LDAP or Active Directory server to read or write arbitrary files and conduct denial-of-service attacks.",[],[29,34,39],{"cve":30,"status":6,"produktLabel":8,"vendor":7,"product":8,"art":24,"bereich":22,"schweregrad":31,"score":32,"epss":33,"added":9,"ransomware":10},"CVE-2026-76954","kritisch",9.8,0.00634,{"cve":35,"status":6,"produktLabel":8,"vendor":7,"product":8,"art":36,"bereich":22,"schweregrad":23,"score":37,"epss":38,"added":9,"ransomware":10},"CVE-2026-13672","Zugriff auf fremde Datensätze über ihre Kennung (IDOR)",8.8,0.0073,{"cve":40,"status":6,"produktLabel":8,"vendor":7,"product":8,"art":41,"bereich":22,"schweregrad":23,"score":37,"epss":42,"added":9,"ransomware":10},"CVE-2026-18792","Zugriff auf Dateien außerhalb des erlaubten Ordners (Path Traversal)",0.00919,"2026-11-13T12:30:14.259Z",1794573101631]