EXP IP Scanner 1.4.1

Spot outdated Synology NAS security builds from the same network scan.

Version 1.4.1 expands the passive Security pass with Synology DSM and Package Center checks aimed at NAS devices commonly found on small-business networks.

Check the DSM critical patch level

When a Synology DSM build is exposed, EXP IP Scanner compares it with the fixed releases in Synology-SA-26:13 for CVE-2026-13684 and CVE-2026-13639. A disclosed affected build is Critical. The covered minimum fixed releases are DSM 7.4-90075, 7.3.2-86009-4, 7.2.2-72806-9, and 7.2.1-69057-12.

Synology PHP2Shell package awareness

On confirmed Synology systems, the scanner also looks for enough PHP package detail to compare the runtime with Synology-SA-26:14. When the Synology package revision is exposed, it can distinguish affected and fixed Package Center releases for PHP 7.4 through 8.4. PHP 7.3 is treated as requiring retirement or remediation because Synology lists no fixed PHP 7.3 package.

No false certainty when the build is hidden

Many DSM systems do not disclose their full build number to an unauthenticated request. In that case EXP IP Scanner reports Needs Review and tells the technician to verify DSM Update & Restore or Package Center directly. It does not turn an unknown patch level into a fake Critical result.

Works in the existing Security flow

There is no new dashboard to learn. Scan the network, press Security, and use the existing Issues filter to isolate red or amber devices. The Website check can also recognize Synology web endpoints when you check a hostname or URL directly.

Still passive by design

The Synology checks use ordinary HTTP and HTTPS requests only, including public DSM metadata endpoints where available. They do not try credentials, send exploit payloads, execute code, or change the NAS.