CVE-2026-13639

An insufficient entropy vulnerability in the login logic of Synology DiskStation Manager prior to specified versions allows remote attackers to exploit the system, potentially leading to unauthorized file access and denial-of-service attacks. Organizations using affected versions of DSM should prioritize patching to mitigate the risk of data breaches and service disruptions. This is particularly critical for businesses relying on Synology devices for data storage and management.