CVE-2019-10633

PoC —

CVSS 3.0

8.8 high

EPSS

3%p88

Published

Apr 9, 2019 (Apr 9, 2019)

Modified

Jun 17, 2026

Description

An eval injection vulnerability in the Python web server routing on the Zyxel NAS 326 version 5.21 and below allows a remote authenticated attacker to execute arbitrary code via the tjp6jp6y4, simZysh, and ck6fup6 APIs.

Vendors: zyxel
Products: nas326 firmware
Weakness: CWE-94
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.2%)

In the news0 stories

No ingested article mentions this CVE yet.