← Back

Mycloud Nas

mycloud_nas

Vendor: Western Digital • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Western Digital
1Mycloud Nas
May 6, 2026
Jan 3, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data.
1Western Digital
1Mycloud Nas
May 6, 2026
Jan 3, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie header.