Western Digital vendor intelligence

Western Digital Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting Western Digital products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Total KEVs
2
Known exploited vulnerabilities affecting Western Digital products
In CISA KEV
0
Records also listed in the official catalog
Beyond CISA KEV
2
Additional exploited CVEs absent from CISA KEV
Sensor Observed
0
Western Digital KEVs with sensor-observed exploitation activity

The catalog gap matters for Western Digital exposure

Two of the two exploited Western Digital CVEs tracked here are not in CISA KEV. Teams relying on the official catalog alone would miss 100% of this vendor portfolio.

0%
Covered by CISA
100%
Beyond CISA
2
Product families

Attested Western Digital CVEs

Search the exploited-vulnerability portfolio, then narrow it to official CISA coverage or the additional records KEV Intelligence tracks beyond the catalog.

How exploitation is verified
CVE / description Product Confidence CISA KEV Added
CVE-2016-10108

Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified...

MyCloud NAS High Beyond CISA 05 Jul 2025
CVE-2017-17560

An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component,...

MyCloud PR4100 High Beyond CISA 12 Dec 2017

Showing 2 of 2 Western Digital known exploited vulnerabilities.

Recurring weakness patterns

Authentication and neutralization account for two mapped occurrences across this Western Digital KEV portfolio.

Browse all KEVs →

Early warning alerts

Get alerts on high-impact exploitation

Receive curator-selected alerts when exploitation activity warrants attention. Each alert includes the evidence and context needed to decide what requires attention now.

Occasional high-impact alerts. Unsubscribe anytime. See our Privacy Policy.