CVE Intelligence

Western Digital vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Western Digital products: 2 record(s), with severity, exploitation and fixes.

WD Discovery 1My Cloud 1

Exploited only (KEV) →

CVE-2025-30248 High · 8.9 CWE-427 Jan 26, 2026
Uncontrolled Search Path Element in Western Digital WD Discovery
DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker to execute arbitrary code via placement of a crafted dll in the installer's search path.
CVE-2025-30247 Critical · 9.3 CWE-78 Sep 29, 2025
OS Command Injection in Western Digital My Cloud
An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST.