CVE WatchJul 9, 2026

CVE-2020-29189

Incorrect Access Control vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated attackers to bypass read-only restriction an

CVSS

8.1

High

EPSS

1.8%

p77

KEV

—

Exploit Today

0-100

Published: Dec 24, 2020 · Last modified: Jul 9, 2026

EPSS · 30d

1.2%EPSS · 30 days1.8%

2026-06-302026-07-16

Technical description

Incorrect Access Control vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated attackers to bypass read-only restriction and obtain full access to any folder within the NAS

Official references

www.ihteam.nethttps://www.ihteam.net/advisory/terramaster-tos-multiple-vulnerabilities/
www.ihteam.nethttps://www.ihteam.net/advisory/terramaster-tos-multiple-vulnerabilities/

Related CVEs

No related CVEs by CWE or product.