Ugreen vulnerabilities
We track 2 vulnerabilities in Ugreen products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 7, 2025.
2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score
Latest Ugreen vulnerabilities
- 7.2 High severity
DH2100+: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in UGREEN DH2100+ up to 5.3.0.251125. This impacts the function handler_file_backup_create of the file /v1/file/backup/create of the component nas_svr. The manipulation of the argument path leads to command injection.
- 7.2 High severity
DH2100+: Improper Restriction of Operations within the Bounds of a Memory Buffer
A weakness has been identified in UGREEN DH2100+ up to 5.3.0.251125. This affects the function handler_file_backup_create of the file /v1/file/backup/create of the component nas_svr. Executing a manipulation of the argument path can lead to buffer overflow. Th