Western Digital
WD My Cloud EX2: critical CVEs, secure urgently
The WD My Cloud EX2 was affected by serious security incidents including the 2022 WD cloud attack that wiped data for thousands of users. Critical CVEs remain active.
- Risk level
- High risk
- Category
- NAS and storage
- Last reviewed
- 2026-05-23
- Confidence
- high
Support status
Check WD support status: several older My Cloud models have reached end of support and no longer receive patches.
Typical symptoms
- WD critical security update notification
- WD My Cloud Service access disrupted
- Admin interface exposed on the Internet
Fixes to try
- Apply all available firmware updates
- Disable cloud access if local storage is sufficient
- Back up data outside the NAS before any migration