Multiple vulnerabilities in Synology MailPlus Server (June 30, 2026)

unknownCVE-2026-13135 CVE-2025-15660 CVE-2026-13136

Multiple vulnerabilities have been discovered in Synology MailPlus Server. Some of them allow an attacker to cause remote denial of service, data confidentiality breaches, and data integrity breaches.

CSIRTS triage

vendor: Synology product: MailPlus Server Denial of service Information disclosureOther

What: Multiple vulnerabilities could allow remote denial of service and data breaches.
Who is affected: Users of Synology MailPlus Server.
Urgency: Remediation is important due to the potential for service disruption and data breaches.
Action: Update to the latest version of Synology MailPlus Server.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch MailPlus Server

Get an email when a new MailPlus Server advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-06-30
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0819/

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-13135	coverage & exploitation status	NVD · CVE.org
CVE-2025-15660	coverage & exploitation status	NVD · CVE.org
CVE-2026-13136	coverage & exploitation status	NVD · CVE.org

Multiple vulnerabilities in Synology MailPlus Server (June 30, 2026)

CSIRTS triage

Details

Referenced CVEs

More from CERT-FR Avis de sécurité