Multiple Western Digital MyCloud NAS devices are affected by several security flaws, varying in severity, that allow attackers to bypass authentication, execute code on the device, and upload or download user data. These security flaws have not been reported to Western Digital and are still unpatched with public exploit code available for more than half of the vulnerabilities.