CVE-2019-10631

8.8 highEPSS 2.2%

High (8.8) in zyxel nas326 firmware. EPSS 2.2% chance of exploitation in the next 30 days.

Shell Metacharacter Injection in the package installer on Zyxel NAS 326 version 5.21 and below allows an authenticated attacker to execute arbitrary code via multiple different requests.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2019-04-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zyxel:nas326_firmware

References

http://maxwelldulin.com/BlogPost?post=3236967424
http://maxwelldulin.com/BlogPost?post=3236967424

Check your stack JSON