CVE-2023-27992: Zyxel Multiple NAS Devices Command Injection Vulnerability
The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions prior to V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands remotely by sending a crafted HTTP request.
Published Jun 19, 2023 · Updated Jun 17, 2026
Required action
Apply updates per vendor instructions.
Advisory details
From the National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.
The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions prior to V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands remotely by sending a crafted HTTP request.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology
More Zyxel vulnerabilities
All Zyxel entriesCVE-2026-7273
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
high8.8ExploitedJun 16, 2026CVE-2024-40890
Zyxel DSL CPE OS Command Injection Vulnerability
high8.8ExploitedFeb 4, 2025CVE-2024-40891
Zyxel DSL CPE OS Command Injection Vulnerability
high8.8ExploitedFeb 4, 2025CVE-2024-11667
Zyxel Multiple Firewalls Path Traversal Vulnerability
critical9.8ExploitedNov 27, 2024CVE-2023-33009
Zyxel Multiple Firewalls Buffer Overflow Vulnerability
critical9.8ExploitedMay 24, 2023CVE-2023-33010
Zyxel Multiple Firewalls Buffer Overflow Vulnerability
critical9.8ExploitedMay 24, 2023