# I need to report a vulnerability **URL:** \ **Category:** My Cloud OS 3\ **Created:** [October 8, 2016, 9:49pm UTC](https://community.wd.com/t/i-need-to-report-a-vulnerability/180996 "2016-10-08T21:49:36Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![subsonic](https://sea2.discourse-cdn.com/wd/user_avatar/community.wd.com/subsonic/32/42070_2.png) [@subsonic](https://community.wd.com/u/subsonic)\ **Post date:** [October 8, 2016, 9:49pm UTC](https://community.wd.com/t/i-need-to-report-a-vulnerability/180996/1 "2016-10-08T21:49:36Z")
I need to report a vulnerability in WD MyCloud EX2 devices. Who do I contact? ---
**Author:** ![SBrown](https://avatars.discourse-cdn.com/v4/letter/s/9f8e36/32.png) [@SBrown](https://community.wd.com/u/SBrown)\ **Post date:** [October 9, 2016, 12:28am UTC](https://community.wd.com/t/i-need-to-report-a-vulnerability/180996/2 "2016-10-09T00:28:18Z")
@subsonic I will PM you. ---
**Author:** ![subsonic](https://sea2.discourse-cdn.com/wd/user_avatar/community.wd.com/subsonic/32/42070_2.png) [@subsonic](https://community.wd.com/u/subsonic)\ **Post date:** [October 18, 2016, 11:14pm UTC](https://community.wd.com/t/i-need-to-report-a-vulnerability/180996/3 "2016-10-18T23:14:14Z")
Hey. Any updates on the status? I know it may take a while, I was just wondering if there’s any feedback. ---
**Author:** ![SBrown](https://avatars.discourse-cdn.com/v4/letter/s/9f8e36/32.png) [@SBrown](https://community.wd.com/u/SBrown)\ **Post date:** [October 19, 2016, 1:36am UTC](https://community.wd.com/t/i-need-to-report-a-vulnerability/180996/4 "2016-10-19T01:36:22Z")
Hello, The information provided has been submitted to our security teams for analysis. Have you a CVE number to share? ---
**Author:** ![subsonic](https://sea2.discourse-cdn.com/wd/user_avatar/community.wd.com/subsonic/32/42070_2.png) [@subsonic](https://community.wd.com/u/subsonic)\ **Post date:** [October 19, 2016, 2:13am UTC](https://community.wd.com/t/i-need-to-report-a-vulnerability/180996/5 "2016-10-19T02:13:00Z")
I don’t have a CVE number to share. I’m not sure if I should be reporting it for a CVE or letting WD do that and mention me in the credits. I didn’t want to report this for a CVE without coordinating with WD. I believe in responsible disclosure. My concerns are first and foremost responsible disclosure, giving WD ample time to review and fix the issue before I disclose it publicly, followed by my desire to get credit for any related CVE. Please advise on WD’s process for reporting vulnerabilities and assigning CVE’s. Thanks ---
**Author:** ![SBrown](https://avatars.discourse-cdn.com/v4/letter/s/9f8e36/32.png) [@SBrown](https://community.wd.com/u/SBrown)\ **Post date:** [December 13, 2016, 11:13pm UTC](https://community.wd.com/t/i-need-to-report-a-vulnerability/180996/6 "2016-12-13T23:13:43Z")
@subsonic My Cloud firmware 2.21.126 has been released to the field for the following products. What’s new! • Resolved security vulnerability related to remote access. • Improved My Cloud Cloud connectivity across My Cloud web, mobile & client apps. **My Cloud (Single Bay 2.xx firmware)** Firmware Release 2.21.126 (12/13/2016) [http://download.wdc.com/nas/My\_Cloud\_GLCR\_2.21.126.bin](http://download.wdc.com/nas/My_Cloud_GLCR_2.21.126.bin) > **[WD\_My\_Cloud\_Firmware\_Release\_Notes\_2.21.126.pdf](https://support.wdc.com/download/notes/WD_My_Cloud_Firmware_Release_Notes_2.21.126.pdf)** > > 211.70 KB **My Cloud Mirror Gen2** Firmware Release 2.21.126 (12/13/2016) [http://download.wdc.com/nas/My\_Cloud\_BWVZ\_2.21.126.bin](http://download.wdc.com/nas/My_Cloud_BWVZ_2.21.126.bin) > **[WD\_MyCloud\_MirrorGen2\_Firmware\_Release\_Notes\_2.21.126.pdf](https://support.wdc.com/download/notes/WD_MyCloud_MirrorGen2_Firmware_Release_Notes_2.21.126.pdf)** > > 212.86 KB