EUVD-2026-68485

A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue is some unknown functionality of the file /cgi-bin/usbdevice.cgi of the component CGI Handler. Such manipulation of the argument fupsip leads to os command injection. The attac...

EUVD-2026-68481

A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomountmgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can b...

Western Digital MyCloud NAS - Authentication Bypass

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a password, thereby gaining full control of the...

D-Link NAS - Command Injection via Group Parameter

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument group leads to os command injection. i...

CVE-2023-6538

CVE-2023-6538 CVE-2023-6538は、Hitachi NAS（HNAS）の System Management Unit （SMU）のConfiguration Backup & Restore機能に見られる 安全でない直接オブジェクト参照 （IDOR ）の脆弱性です。この脆弱性は、14.8.7825.01より前のSMUバージョンに影響します。 悪用 このエクスプロイトを実行するには、攻撃者がRead-OnlyまたはGlobal Administratorではないユーザーアカウントの認証情報を制御している必要があります。すなわち： Storage...

D-Link-NAS-CVE-2024-10914-

D-Link-NAS-CVE-2024-10914- これはD-Link RCE脆弱性検出プログラムです 脆弱性概要 D-Link DNS-320などは、中国のD-Link社製NAS（ネットワーク接続ストレージ）デバイスです。 D-Linkの複数製品にセキュリティ脆弱性が存在します。この脆弱性は、パラメータnameに対する誤った操作がOSコマンドインジェクションを引き起こすことに起因します。以下の製品およびバージョンが影響を受けます：D-Link DNS-320、DNS-320LW、DNS-325、DNS-340L 20241028以前のバージョン ネットワークスキャン...

CVE-2023-5808

CVE-2023-5808 CVE-2023-5808は、日立NAS（HNAS）の System Management Unit （SMU）のBackup & Restore機能に見られる 安全でない直接オブジェクト参照 （IDOR ）の脆弱性です。この脆弱性は、14.8.7825.01より前のSMUバージョンに影響します。 悪用 このエクスプロイトでは、攻撃者がRead-OnlyまたはGlobal Administrator以外のユーザーアカウントの認証情報を制御している必要があります。つまり： Storage Administrator Server Administrator...

CVE-2024-10914

CVE-2024-10914 Test della vulnerabilità di iniezione di comandi per D-Link NASTest manuale con Burp Suite Dork per trovare dispositivi vulnerabili Utilizza il seguente dork di ricerca per trovare dispositivi D-Link NAS potenzialmente vulnerabili: root@kitploit: FOFA: app="DLink-DNS-ShareCenter" &...

CVE-2026-30059

An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...

CVE-2026-30062

An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted NAS PDU...

EUVD-2026-67110

An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...

CVE-2026-30059

An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...

CVE-2026-30059

free5gc v4.0.1 , an open-source 5G Core implementation, contains a vulnerability in its NAS decoder component that allows a remote attacker to trigger a Denial of Service by sending a crafted Registration Request message. The CVSS 3.1 score is 7.5 (HIGH) with a network attack vector requiring no ...

EUVD-2026-67112

An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted NAS PDU...

CVE-2026-30062

An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted NAS PDU...

CVE-2026-30062

CVE-2026-30062 affects the NGAP handler in free5gc v4.0.1 , an open-source 5G Core implementation. An unauthenticated remote attacker can send a crafted NAS PDU to trigger a Denial of Service , with the CVSS 3.1 score of 7.5 (HIGH) reflecting a network attack vector requiring no privileges or use...

Zyxel NAS Firmware 5.21- Remote Code Execution

Multiple Zyxel network-attached storage NAS devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. Zyxel NAS devices achieve authentication by using th...

CVE-2026-47359

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache CloudStack's NAS backup provider plugin. The addBackupRepository API available since 4.20.0.0 and updateBackupRepository API introduced in 4.22.0.0 accept unsanitized command options f...

CVE-2026-47359

An OS Command Injection vulnerability exists in Apache CloudStack's NAS backup provider plugin . The addBackupRepository API (available since 4.20.0.0) and updateBackupRepository API (introduced in 4.22.0.0) accept unsanitized mount command options for backup repositories. A malicious operator ac...

EUVD-2026-63848

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache CloudStack's NAS backup provider plugin. The addBackupRepository API available since 4.20.0.0 and updateBackupRepository API introduced in 4.22.0.0 accept unsanitized command options f...