CVE-2026-9491

Awaiting Analysis Awaiting Analysis - Queue

SSRF Vulnerability in Synology Chat Server

Publication date: 2026-08-28

Last updated on: 2026-09-01

Assigner: Synology Inc.

Description

A server-ide request forgery (SSRF) vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote authenticated users to obtain non-sensitive information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-09-01

Generated

2026-09-17

AI Q&A

2026-08-28

EPSS Evaluated

2026-09-15

NVD

CVE-2026-9491

EUVD

EUVD-2026-67462

Affected Vendors & Products

Vendor	Product	Version / Range
synology	chat_server	to 2.4.5-22148 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

This is a Server-Side Request Forgery (SSRF) vulnerability in Synology Chat Server before version 2.4.5-22148. It allows remote authenticated users to make the server send unauthorized requests to internal or external systems, potentially accessing non-sensitive information.

Detection Guidance

To detect this SSRF vulnerability in Synology Chat Server, check the server version. If it is before 2.4.5-22148, the system is vulnerable. Use commands like 'curl -s http://[server]/version' or check the Synology Package Center for the installed version.

Impact Analysis

An attacker could exploit this to trick the server into accessing restricted resources, leaking internal information, or interacting with other services. This may lead to data exposure or further attacks if combined with other vulnerabilities.

Compliance Impact

This SSRF vulnerability in Synology Chat Server allows remote authenticated users to obtain non-sensitive information, which may expose personal or sensitive data. While the impact is limited to non-sensitive information, improper handling of such data could potentially conflict with GDPR or HIPAA requirements for data protection and access controls.

Mitigation Strategies

Update Synology Chat Server to version 2.4.5-22148 or later to address the SSRF vulnerability. Restrict network access to the webhook service and monitor for unusual requests targeting internal systems.

Hi! I’m here to help you understand CVE-2026-9491. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70