
- Western Digital patches critical RCE flaw CVE-2025-30247 in multiple My Cloud NAS models
- Vulnerability exploited via crafted HTTP POST requests targeting the My Cloud user interface
- End-of-life models won’t receive updates; users urged to patch or migrate to newer devices
Data storage giant Western Digital just fixed a critical-severity vulnerability that was discovered in multiple My Cloud NAS models.