Critical severity9.8NVD Advisory· Published Dec 30, 2025· Updated Jul 5, 2026

CVE-2025-66848

Description

JD Cloud NAS routers AX1800 (4.3.1.r4308 and earlier), AX3000 (4.3.1.r4318 and earlier), AX6600 (4.5.1.r4533 and earlier), BE6500 (4.4.1.r4308 and earlier), ER1 (4.5.1.r4518 and earlier), and ER2 (4.5.1.r4518 and earlier) contain an unauthorized remote command execution vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jdcloud/Ax1800 Firmware
cpe:2.3:o:jdcloud:ax1800_firmware:*:*:*:*:*:*:*:*
Range: <=4.3.1.r4308
Jdcloud/Ax3000 Firmware
cpe:2.3:o:jdcloud:ax3000_firmware:*:*:*:*:*:*:*:*
Range: <=4.3.1.r4318
Jdcloud/Ax6600 Firmware
cpe:2.3:o:jdcloud:ax6600_firmware:*:*:*:*:*:*:*:*
Range: <=4.5.1.r4533
Jdcloud/Be6500 Firmware
cpe:2.3:o:jdcloud:be6500_firmware:*:*:*:*:*:*:*:*
Range: <=4.4.1.r4308
Jdcloud/Er1 Firmware
cpe:2.3:o:jdcloud:er1_firmware:*:*:*:*:*:*:*:*
Range: <=4.5.1.r4518
Jdcloud/Er2 Firmware
cpe:2.3:o:jdcloud:er2_firmware:*:*:*:*:*:*:*:*
Range: <=4.5.1.r4518
JD/Cloud NAS routers AX1800description
JD Cloud/AX1800llm-create
Range: <=4.3.1.r4308
JD Cloud/ER1llm-create
Range: <=4.5.1.r4518
JD Cloud/ER2llm-create
Range: <=4.5.1.r4518
JD Cloud/AX3000llm-fuzzy
Range: <=4.3.1.r4318
JD Cloud/AX6600llm-fuzzy
Range: <=4.5.1.r4533
JD Cloud/BE6500llm-fuzzy
Range: <=4.4.1.r4308

Patches

Vulnerability mechanics

References

www.jdcloud.com/cn/nvdProduct
www.notion.so/JD-Cloud-Unauth-RCE-2d22b76e8e0c802c975bf186b208d0c2nvdPermissions Required

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000