Login Request a demo
SC
Product
Synology Chat Server
by Synology · last CVE Aug 28, 2026
3
CVEs
0
On KEV
9.0
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 1High 0Medium 2Low 0
Severity
All severities3Critical1High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Synology Chat Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40541
9.0
0%
Aug 28
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote…
Affected: before 2.4.5-22148
CVE-2026-9548
6.5
0%
Aug 28
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote…
Affected: before 2.4.5-22148
CVE-2026-9491
4.3
0%
Aug 28
A server-ide request forgery (SSRF) vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote authenticated users to obtain non-sensitive information
Affected: before 2.4.5-22148
Showing 3