Skip to content

UGREEN NAS

Controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile1 entries

  1. 2024

    NAS system publicly leaks TLS certificate private keys; new product pulled 3 days after launch

    A UGREEN UGOS Pro trial account publicly exposed wildcard TLS certificates and private keys, including for *.ugnas.com, which could be used for man-in-the-middle hijacking and leaking user data; previously, the new DXP-series NAS was pulled from sale and an apology issued three days after launch due to system defects. UGREEN said official users were unaffected and revoked the certificates.