JingDong vulnerabilities
We track 4 vulnerabilities in JingDong products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on June 6, 2026.
Latest JingDong vulnerabilities
- 8.8 High severity
JD Cloud Box AX6600: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The impacted element is the function set_macfilter of the file /sbin/jdcweb_rpc. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attac
- 8.8 High severity
JD Cloud Box AX6600: Improper Privilege Management
A vulnerability was identified in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. Affected is the function set_stcreenen_deabled_status/get_status of the file /f/service/controlDevice of the component jdcapp_rpc. The manipulation leads to Remote Privilege Esca
- 8.8 High severity
JD Cloud Box AX6600: Incorrect Privilege Assignment
A vulnerability was determined in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. This impacts the function cast_streen of the file /jdcapi of the component jdcweb_rpc. Executing a manipulation of the argument File can lead to Remote Privilege Escalation. The
- 8.8 High severity
JD Cloud Box AX6600: Incorrect Privilege Assignment
A vulnerability was found in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. This affects the function web_get_ddns_uptime of the file /jdcapi of the component jdcweb_rpc. Performing a manipulation results in Remote Privilege Escalation. The attack is possible