Home › Synology DSM › 7.2.1-69057 Update 12
Synology DSM 7.2.1-69057 Update 12 – safe to update?
0 problem reports and 0 positive reports found on Reddit (plus 2 other mentions). Out for 109 days and we haven't found any problem reports. Quiet isn't proof — but most bad releases get noticed within a week.
Newer release in this line: Synology DSM 7.2.1-69057 Update 13 (2026-10-12). If you're updating now, check that one instead — it may already fix the issues reported here.
Security update: this release fixes security issues (highest CVSS 9.8). Waiting carries its own risk — if your device is exposed, weigh that against the reports below.
Did you install 7.2.1-69057 Update 12?
Thanks — your vote is counted.
What's in this release
Fixed Issues • Fixed security vulnerabilities ( Synology-SA-26:06 ).
Source: Synology release notes
CVEs fixed
- CVE-2026-13639 CRITICAL 9.8 (NVD: fixed in this version)
An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks. - CVE-2026-13684 CRITICAL 9.8 (NVD: fixed in this version)
An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct denial-of-service att… - CVE-2026-13673 HIGH 8.8 (NVD: fixed in this version)
An incorrect permission assignment for critical resource vulnerability in LDAP API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to read or write arbitrary files and c… - CVE-2026-6205 HIGH 8.1 (NVD: fixed in this version)
An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write arbitrary files and conduct denial-of-servi… - CVE-2026-13635 MEDIUM 5.3 (NVD: fixed in this version)
An improper encoding or escaping of output vulnerability in Auth API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to obtain non-sensitive information. - CVE-2026-13623 MEDIUM 4.8 (NVD: fixed in this version)
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Theme API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users with a… - CVE-2026-13666 LOW 3.5 (NVD: fixed in this version)
An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability in Sharing API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write limited files when… - CVE-2026-13683 LOW 2.7 (NVD: fixed in this version)
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in EventScheduler API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated use…
Community reports
- Mention
Can't update my DS923+ DSM at all · Reddit · 2026-08-24
Hi can anyone help me please, i can't update the DSM version to the newest version at all. I've already tried to download the .pat manually from Synology center, got to the end user license agreement and update notice, then everytime after i click ok, it keeps getting back to th…
- Mention
I am still on DSM 7.2.1 for my DS220+, should I update to 7.3 or 7.4 or stay?? · Reddit · 2026-07-30
I didn't update to 7.3 basically as a vote against what Synology was doing...and I have been manually updating the patches but stayed at 7.2.1. I was pretty close to upgrade to 7.4, not for any particular reason other than being able to see GPU info (which I am not even sure if…
Reports are found automatically and labelled by an AI model plus keyword rules — they can be wrong. Open the post to judge for yourself.
← Synology DSM 7.2.1-69057 Update 11 · Synology DSM 7.2.1-69057 Update 13 →
Other Synology DSM versions
- 7.4.1-90080 Update 1 2026-10-12
- 7.3.2-86009 Update 5 2026-10-12
- 7.2.2-72806 Update 10 2026-10-12
- 7.2.1-69057 Update 13 2026-10-12
- 7.4.1-90080 2026-07-23
- 7.3.2-86009 Update 4 2026-06-30
- 7.2.2-72806 Update 9 2026-06-30
- 7.2.1-69057 Update 12 2026-06-30
The weekly "safe to update?" email
One short email a week: what shipped, what broke, and what's safe to install. No spam.
Thanks — you're on the list.
We store only your email address and the date you signed up, to send this newsletter. We never sell or share it. Every email will have a one-click unsubscribe; you can also ask us to delete your address at any time. Privacy details.