The inclusion in the CISA KEV catalog proves real-world exploitation and thus more than a pure patch reminder: exposed SharePoint instances are at acute risk regardless of patch status.
The report summarizes three different vulnerabilities in Synology NAS that could allow arbitrary data to be read, without providing CVE details or indications of active exploitation.