| Title | JingDong Cloud NAS Router AX6600 (4.5.1.r4533 and earlier) Remote Command Execution |
|---|
| Description | The web_get_ddns_uptime interface of the JD Wireless Treasure Router contains an RCE vulnerability
The device received parameters from the user without strict processing and filtering, and directly concatenated them for command execution, resulting in RCE
You can obtain vulnerability details by accessing the following link https://my.feishu.cn/wiki/URLywnBj2i2dpBk3dcQcWqFZnSK |
|---|
| Source | ⚠️ https://my.feishu.cn/wiki/URLywnBj2i2dpBk3dcQcWqFZnSK |
|---|
| User | ShiyuFan_BinYuan (UID 95126) |
|---|
| Submission | 02/03/2026 09:20 (3 months ago) |
|---|
| Moderation | 02/15/2026 20:17 (12 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 346168 [JingDong JD Cloud Box AX6600 up to 4.5.1.r4533 jdcweb_rpc /jdcapi web_get_ddns_uptime privileges management] |
|---|
| Points | 20 |
|---|