Ce mail provient de l'extérieur, restons vigilants ===================================================================== CERT-Renater Note d'Information No. 2026/VULN831 _____________________________________________________________________ DATE : 10/08/2026 HARDWARE PLATFORM(S): / OPERATING SYSTEM(S): Systems running Synology Assistant versions prior to 7.0.7-50095. ===================================================================== https://www.synology.com/en-global/security/advisory/Synology_SA_26_12 _____________________________________________________________________ Synology-SA-26:12 Synology Assistant Publish Time: 2026-08-03 13:59:51 UTC+8 Last Updated: 2026-08-03 13:59:51 UTC+8 Severity Important Status Resolved Abstract Synology has released a security update for the Assistant on Windows to address a vulnerability : CVE-2026-4793 allows local users to read or write arbitrary files and conduct denial-of-service. Please refer to the 'Affected Products' table for the corresponding updates. Affected Products Product Severity Fixed Release Availability Synology Assistant Important Upgrade to 7.0.7-50095 or above. Mitigation None Detail CVE-2026-4793 Severity: Important CVSS3 Base Score: 7.3 CVSS3 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CWE-276: Incorrect Default Permissions An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-of-service during installation. Acknowledgement Kazuma Matsumoto, a security researcher at GMO Cybersecurity by IERAE, Inc. Reference Assistant Release Note CVE-2026-4793 Revision Revision Date Description 1 2026-08-03 Initial public release. ========================================================= + CERT-RENATER | tel : 01-53-94-20-44 + + 23/25 Rue Daviel | fax : 01-53-94-20-41 + + 75013 Paris | email:cert@support.renater.fr + =========================================================