CVE Watch9 jul 2026

CVE-2020-29189

Incorrect Access Control vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated attackers to bypass read-only restriction an

CVSS

8.1

Alto

EPSS

1.8%

p77

KEV

—

Exploit Today

0-100

Publicado: 24 dic 2020 · Última mod.: 9 jul 2026

EPSS · 30d

1.2%EPSS · 30 días1.8%

2026-06-302026-07-16

Descripción técnica

Incorrect Access Control vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated attackers to bypass read-only restriction and obtain full access to any folder within the NAS

Referencias oficiales

www.ihteam.nethttps://www.ihteam.net/advisory/terramaster-tos-multiple-vulnerabilities/
www.ihteam.nethttps://www.ihteam.net/advisory/terramaster-tos-multiple-vulnerabilities/

CVEs relacionados

Sin CVEs relacionados por CWE o producto.