Home › Synology DSM › 7.3.2-86009 Update 4

Synology DSM 7.3.2-86009 Update 4 – safe to update?

Newer release in this line: Synology DSM 7.3.2-86009 Update 5 (2026-10-12). If you're updating now, check that one instead — it may already fix the issues reported here.

Security update: this release fixes security issues (highest CVSS 9.8). Waiting carries its own risk — if your device is exposed, weigh that against the reports below.

What's in this release

CVEs fixed

• CVE-2026-13639 CRITICAL 9.8 (NVD: fixed in this version)
  An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks.
• CVE-2026-13684 CRITICAL 9.8 (NVD: fixed in this version)
  An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct denial-of-service att…
• CVE-2026-13673 HIGH 8.8 (NVD: fixed in this version)
  An incorrect permission assignment for critical resource vulnerability in LDAP API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to read or write arbitrary files and c…
• CVE-2026-6205 HIGH 8.1 (NVD: fixed in this version)
  An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write arbitrary files and conduct denial-of-servi…
• CVE-2026-13635 MEDIUM 5.3 (NVD: fixed in this version)
  An improper encoding or escaping of output vulnerability in Auth API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to obtain non-sensitive information.
• CVE-2026-13623 MEDIUM 4.8 (NVD: fixed in this version)
  An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Theme API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users with a…
• CVE-2026-13666 LOW 3.5 (NVD: fixed in this version)
  An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability in Sharing API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write limited files when…
• CVE-2026-13683 LOW 2.7 (NVD: fixed in this version)
  An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in EventScheduler API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated use…

Community reports

• Mention DS720+ - "Insufficient system capacity for update" going 7.3.2 -> 7.4.1. Is Mode 2 reset the only way out? · Reddit · 2026-08-28

  Hi all, I'm stuck trying to update DSM on my DS720+ and I'd like a sanity check before I do something irreversible. The situation: DS720+, currently on DSM 7.3.2-86009 Update 4 Update to 7.4.1-90080 is available (a minor version jump) Control Panel shows a red status: "Insuffici…

• Mention DSM920+ won't update anymore · Reddit · 2026-08-16

  DSM920+ stuck on DSM 7.2.2-72806 Update 5. DSM 7.3.2-86009 Update 4 is available to download. However, I have auto update on for weeks, and I've tried to manually install several times. Screen locks up on clicking install now for ~30 minutes, then just goes back to offering to i…

• Mention Still no DSM 7.4 on my DS923+ · Reddit · 2026-08-07

  Hi there, the DSM 7.4 update is still not showing on my DS923+. While I understand the concept of staged rollouts I wonder if this is intentional and if other DS923+ users are having the same issue. Thanks. EDIT: I am currently on DSM 7.3.2-86009 Update 4. I know that I can down…

• Mention Cloud Sync holding onto files? · Reddit · 2026-08-05

  I'm on a DS1821+ running DSM 7.3.2-86009 Update 4. I needed to offload some files so I created a cloud sync folder to upload to my dropbox. After the files completely synced to dropbox, I deleted the files from the cloud sync folder (I had it set to NOT delete cloud files when l…

• Mention DS920+ RAM upgrade: NAS doesn't boot · Reddit · 2026-07-31

  Installed a Crucial 16GB DDR4-2666 SODIMM 1.2V CL19, model number: CT16G4SFD8266. C16FD1 , into my DS920+ but was met with a flashing power button light. Status and drive LEDs remained dark. This went on for at least an hour before I removed the stick and NAS worked as usual. I…

• Mention Issues with text console not showing up... · Reddit · 2026-07-28

  I did a fresh install of Debian Trixie in text mode... and it should be showing a text console and login, but I only get the first line "/dev/sda1 ... " and then only the blinking cursor. I can ssh into it fine and play with stuff, but even though I've forced the text console 5…

• Mention DS220j to DS420j Direct HDD Migration Question · Reddit · 2026-07-18

  I’m planning to move from a DS220j to a DS420j, and I’m trying to figure out whether direct HDD migration (pull drives from the old NAS, drop them into the new one) is a reliable option. Synology’s official docs say things like: I don't have enough external space to make a backu…

• Mention log center full version stops working · Reddit · 2026-07-15

  I have a DS223, 2 x 10TB RAID 1 WD RED (35% used), DSM 7.3.2-86009 Update 4. I use log center and for the second time, log center has stopped working with advanced features. Log entries for this synology device show, but the features that require the full version are not availab…

• Mention Anyone know anything about the app called "Syno Manager"? · Reddit · 2026-07-14

  I just noticed it. I use NAS Pro with iOS on my setup with Synology DS423+ with DSM 7.3.2-86009 Update 4 and that already works pretty well for me but I’m always looking for better choices. Thank you for your time and your help!

• Mention DS1823xs+ not getting update notices · Reddit · 2026-07-07

  My DS1823xs+ is on DSM 7.3.2-86009 Update 3 and hasn't gotten any update notice as of July 6 even though Update 4 has been out since June 18 and 7.4-90075 has been out since June 15. Does the automatic notice and rollout no longer work for this device? Should I update manually?

• Mention DSM update version: 7.3.2-86009 Update 4 · Reddit · 2026-06-30

  (2026-06-30) Important notes Your Synology NAS may not notify you of this DSM update because of the following reasons. If you want to update your DSM to this version now, please click here to update it manually. The update is not available in your region yet. The update is expec…

Reports are found automatically and labelled by an AI model plus keyword rules — they can be wrong. Open the post to judge for yourself.

← Synology DSM 7.3.2-86009 Update 3 · Synology DSM 7.3.2-86009 Update 5 →

Other Synology DSM versions

• 7.4.1-90080 Update 1 2026-10-12
• 7.3.2-86009 Update 5 2026-10-12
• 7.2.2-72806 Update 10 2026-10-12
• 7.2.1-69057 Update 13 2026-10-12
• 7.4.1-90080 2026-07-23
• 7.3.2-86009 Update 4 2026-06-30
• 7.2.2-72806 Update 9 2026-06-30
• 7.2.1-69057 Update 12 2026-06-30