CVE-2026-9491

A server-side request forgery (SSRF) vulnerability in the webhook functionality of Synology Chat Server versions prior to 2.4.5-22148 enables remote authenticated users to access non-sensitive information. While the impact is classified as medium, organizations using affected versions should prioritize patching to mitigate potential information leakage risks. This is particularly relevant for system administrators and security teams managing Synology Chat Server deployments.