CVE-2025-66848 - Jdcloud Er1 Firmware, Jdcloud Ax1800 Firmware and Jdcloud Ax6600 Firmware

Critical 9.8

JD Cloud NAS routers AX1800 (4.3.1.r4308 and earlier), AX3000 (4.3.1.r4318 and earlier), AX6600 (4.5.1.r4533 and earlier), BE6500 (4.4.1.r4308 and earlier), ER1 (4.5.1.r4518 and earlier), and ER2 (4.5.1.r4518 and earlier) contain an unauthorized remote command execution vulnerability.

Affected software

Jdcloud Er1 Firmware

Jdcloud Ax1800 Firmware

Jdcloud Ax6600 Firmware

Jdcloud Ax3000 Firmware

Jdcloud Er2 Firmware

Jdcloud Be6500 Firmware

Reference links

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.