CVE-2026-13136

unknowncovered by 1 sourcefirst seen 2026-06-30

Multiple vulnerabilities have been discovered in Synology MailPlus Server. Some of them allow an attacker to cause remote denial of service, data confidentiality breaches, and data integrity breaches.

CSIRTS triage

What: Multiple vulnerabilities could allow remote denial of service and data breaches.
Who is affected: Users of Synology MailPlus Server.
Urgency: Remediation is important due to the potential for service disruption and data breaches.
Action: Update to the latest version of Synology MailPlus Server.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-13136

Get an email if CVE-2026-13136 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (1)

unknownMultiple vulnerabilities in Synology MailPlus Server (June 30, 2026)cert-fr-avis · 2026-06-30

External references

NVD record for CVE-2026-13136

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-13136 status](https://www.csirts.com/badge/CVE-2026-13136)](https://www.csirts.com/cve/CVE-2026-13136)