https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T12:38:58.392835+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/certfr-2026-avi-0988 certfr-2026-avi-0988 — Une vulnérabilité a été découverte dans Synology Assistant. Elle permet à un attaquant de provoquer une atteinte à la c… 2026-09-28T12:38:58.423022+00:00 certfr-2026-avi-0988 https://vulnerability.circl.lu/vuln/fkie_cve-2026-4793 fkie_cve-2026-4793 2026-09-28T12:38:58.423170+00:00

An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-of-service during installation.

 https://vulnerability.circl.lu/vuln/ghsa-x8pf-pjxr-ccfw GHSA-x8pf-pjxr-ccfw 2026-09-28T12:38:58.423230+00:00

An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-of-service during installation.

 https://vulnerability.circl.lu/vuln/jvndb-2026-000113 jvndb-2026-000113 2026-09-28T12:38:58.423260+00:00

Synology Assistant provided by Synology Inc. contains the following vulnerability.<a href='https://cwe.mitre.org/data/definitions/276.html' target='_blank'></a><a href='https://www.cve.org/CVERecord?id=CVE-2026-4793' target='_blank'></a><ul><li>Incorrect default permissions (CWE-276) - CVE-2026-4793</li></ul>Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.