CVE-2023-28129 (published 2023-08-10T19:07:44.291Z)
DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user.
Affected products: Vendor: Ivanti
Product: Desktop & Server Management (DSM) 
Versions: 2022 su2