CVE-2019-10631

PoC —

CVSS 3.0

8.8 high

EPSS

2%p82

Published

Apr 9, 2019 (Apr 9, 2019)

Modified

Jun 17, 2026

Description

Shell Metacharacter Injection in the package installer on Zyxel NAS 326 version 5.21 and below allows an authenticated attacker to execute arbitrary code via multiple different requests.

Vendors: zyxel
Products: nas326 firmware
Weakness: CWE-78
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news0 stories

No ingested article mentions this CVE yet.