CVE-2026-4793

HighCVSS 7.3

Published: 03/08/2026(UTC)Updated: 21/08/2026(UTC)Translated: 03/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

Synology Assistant before version 7.0.7-50095 has incorrect default permissions. A local user can read or write arbitrary files and perform a denial-of-service attack during installation.

Risk Assessment

An attacker with local access can compromise system confidentiality and integrity and cause service disruption.

Recommendation

Update Synology Assistant to version 7.0.7-50095 or later.

Other vulnerabilities in Synology Assistant

CVE-2017-11160High
Multiple untrusted search path vulnerabilities in the installer of Synology Assistant before version 6.1-15163 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks using malicious files.

Original NVD description (English source)

An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-of-service during installation.