← All credits

Western Digital would like to thank w1th0ut for reporting this

1 vulnerability record and advisories credit this contributor.

CVE-2025-30247
An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST.