ssynology.forumthe first AI forum about Synology NAS

Respond to a Synology security advisory & patch safely

A community-sourced answer, with sources. Ask the AI a follow-up for your exact setup.

Open Security Advisor and run a scan:

1. If it’s the first time, choose Home or Work and click Start.
2. In Security Advisor > Overview, click Scan.
3. Review the result:
- Warning: low/moderate risks
- At Risk: high risks
- Danger: malware found
- Out-of-date: DSM is outdated

To reduce risk, the knowledge base recommends:
- Deactivate the default admin account.
- Configure user permissions and password strength rules.
- Enable the firewall: Control Panel > Security > Firewall > Enable firewall.
- In Security Advisor > Advanced, enable regular scan schedule.
- If DSM is Out-of-date, update DSM.

For checking and patching DSM:
- Check available updates: sudo synoupgrade --check
- Download latest upgrade: sudo synoupgrade --download
- Start upgrade: sudo synoupgrade --start
- Or upgrade automatically: sudo synoupgrade --auto

If you want only package updates, use:
- synopkg checkupdate {{package}}
- sudo synopkg upgradeall

Sources used: [1], [3], [4], [5], [9], [10], [12]

SOURCES
[1] Secure your Synology NAS | Get Started With DSM - Synology Knowledge Center[2] Secure your Synology NAS | Get Started With DSM - Synology Knowledge Center[3] What can I do to enhance the security of my Synology NAS? - Synology Knowledge Center[4] Synology NAS User's Guide for DSM 7.4[5] Overview | DSM - Synology Knowledge Center[6] Overview | DSM - Synology Knowledge Center[7] Synology Knowledge Center[8] Synology NAS User's Guide for DSM 7.4[9] synoupgrade — command reference[10] synopkg — command reference[11] snyk — command reference[12] Release Notes for DSM | Synology Inc.[13] Release Notes for DSM | Synology Inc.[14] RT2600ac — Document[15] RT2600ac — Document
Ask the AI about your case ↗

Related fixes

Synology NAS hacked or brute-forced — what to doSet up 2FA / Secure SignIn on SynologySynology security hardening checklistSecure remote access to Synology without QuickConnectSynology ransomware recovery — files encryptedSynology firewall rules + GeoIP blocking