Known Vulnerabilities for My Cloud Firmware by Westerndigital
Listed below are 10 of the newest known vulnerabilities associated with "My Cloud Firmware" by "Westerndigital".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-100294 json | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-100293 json | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-96587 json | The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credent... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-94204 json | The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unr... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-89034 json | TCH QRing smart ring model R20_B006 running firmware RT09R20_1.00.00_250318 contains an unauthenticated Bluetooth Low Energy ... | Not Provided | 2026-09-16 | 2026-09-19 |
| CVE-2026-64934 json | The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without in... | Not Provided | 2026-08-11 | 2026-08-12 |
| CVE-2026-56718 json | AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service ... | Not Provided | 2026-08-30 | 2026-09-04 |
| CVE-2026-51671 json | Incorrect access control in the getCloudDownloadStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated a... | Not Provided | 2026-08-31 | 2026-09-01 |
| CVE-2026-51662 json | Incorrect access control in the getCloudSrvCheckStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated a... | Not Provided | 2026-08-28 | 2026-09-01 |
| CVE-2022-36331 json | Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attac... | 7.5 - HIGH | 2023-06-12 | 2023-06-21 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Westerndigital | My Cloud Firmware | 5.04.114 | |||
| Operating System | Westerndigital | My Cloud Firmware | 04.05.00-320 | |||
| Operating System | Westerndigital | My Cloud Firmware | - |