https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:55:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-03645 bdu:2023-03645 https://cve.radiocsirt.org/vuln/bdu:2023-03645 https://cve.radiocsirt.org/vuln/euvd-2026-199797 EUVD-2026-199797 https://cve.radiocsirt.org/vuln/euvd-2026-199797 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22815 <p>Post-authentication remote command injection vulnerability in Western Digital My Cloud OS 5 devices that could allow an attacker to execute code in the context of the root user on vulnerable CGI files. This vulnerability can only be exploited over the network and the attacker must already have admin/root privileges to carry out the exploit. An authentication bypass is required for this exploit, thereby making it more complex. The attack may not require user interaction. Since an attacker must already be authenticated, the confidentiality impact is low while the integrity and availability impact is high.</p> <p>This issue affects My Cloud OS 5 devices: before 5.26.300.</p> <p>Post-authentication remote command injection vulnerability in Western Digital My Cloud OS 5 devices that could allow an attacker to execute code in the context of the root user on vulnerable CGI files. This vulnerability can only be exploited over the network and the attacker must already have admin/root privileges to carry out the exploit. An authentication bypass is required for this exploit, thereby making it more complex. The attack may not require user interaction. Since an attacker must already be authenticated, the confidentiality impact is low while the integrity and availability impact is high.</p> <p>This issue affects My Cloud OS 5 devices: before 5.26.300.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-22815 https://cve.radiocsirt.org/vuln/ghsa-j2rf-gr77-35c7 <p>Post-authentication remote command injection vulnerabilities in Western Digital My Cloud OS 5 devices that could allow an attacker to execute code in the context of the root user on vulnerable CGI files.</p> <p>This issue affects My Cloud OS 5 devices: before 5.26.300.</p> <p>Post-authentication remote command injection vulnerabilities in Western Digital My Cloud OS 5 devices that could allow an attacker to execute code in the context of the root user on vulnerable CGI files.</p> <p>This issue affects My Cloud OS 5 devices: before 5.26.300.</p> https://cve.radiocsirt.org/vuln/ghsa-j2rf-gr77-35c7 https://cve.radiocsirt.org/vuln/gsd-2023-22815 gsd-2023-22815 https://cve.radiocsirt.org/vuln/gsd-2023-22815