🚨 Critical command-injection flaw found in WD My Cloud NAS

CVE-2025-30247 lets remote attackers execute OS commands via HTTP POST on firmware < 5.31.108. Exploitation could lead to full device takeover.

WD pushed a patch to version 5.31.108.

#ransomNews #WDMyCloud #CommandInjection