CVE-2026-40538

An improper restriction of excessive authentication attempts in Synology DiskStation Manager prior to specified versions allows remote attackers to exploit brute-force attacks, potentially gaining access to limited files. While the severity is rated low, organizations using affected versions should prioritize patching to mitigate the risk of unauthorized access. Users of Synology DSM should ensure they are running the latest updates to protect against this vulnerability.