Jdcloud vulnerabilities
We track 4 vulnerabilities in Jdcloud products across 6 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on February 16, 2026.
Latest Jdcloud vulnerabilities
- 8.8 High severity
JD Cloud Box AX6600: Improper Privilege Management
A vulnerability was identified in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. Affected is the function set_stcreenen_deabled_status/get_status of the file /f/service/controlDevice of the component jdcapp_rpc. The manipulation leads to Remote Privilege Esca
- 8.8 High severity
JD Cloud Box AX6600: Incorrect Privilege Assignment
A vulnerability was determined in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. This impacts the function cast_streen of the file /jdcapi of the component jdcweb_rpc. Executing a manipulation of the argument File can lead to Remote Privilege Escalation. The
- 8.8 High severity
JD Cloud Box AX6600: Incorrect Privilege Assignment
A vulnerability was found in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. This affects the function web_get_ddns_uptime of the file /jdcapi of the component jdcweb_rpc. Performing a manipulation results in Remote Privilege Escalation. The attack is possible
- 9.8 Critical severity
Ax1800 Firmware: Improper Control of Generation of Code
JD Cloud NAS routers AX1800 (4.3.1.r4308 and earlier), AX3000 (4.3.1.r4318 and earlier), AX6600 (4.5.1.r4533 and earlier), BE6500 (4.4.1.r4308 and earlier), ER1 (4.5.1.r4518 and earlier), and ER2 (4.5.1.r4518 and earlier) contain an unauthorized remote command