CVE-2020-27160: Westerndigital My Cloud Firmware

Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days.

Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 (issue 3 of 3).

Affected products

• Westerndigital My Cloud Firmware: before 5.04.114 (fixed in 5.04.114)

Published 2020-10-27. Last modified 2026-06-17.