Critical (9.8) in westerndigital my cloud firmware. EPSS 6.2% chance of exploitation in the next 30 days.
An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow remote code execution with resultant escalation of privileges.
Severity
CVSS 3.1
9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
6.2% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)