zyxel nas326 firmware

Name: zyxel nas326 firmware
Brand: zyxel

productUS

cpe:2.3:o:zyxel:nas326_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical7high2medium0low

updated 2026-10-28

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-9054US	critical9.8OT critical	100.0% (100th)	KEV	5.21\(aazf.7\)c0	2020-03-04	2 versions
CVE-2023-27992US	—OT critical	82.3% (100th)	KEV	5.21\(aazf.14\)c0	2023-06-19	< 5.21\(aazf.14\)c0
CVE-2024-29972US	—	90.3% (100th)	Exploit	5.21\(aazf.17\)c0	2024-06-04	< 5.21\(aazf.17\)c0
CVE-2024-29973US	—	86.2% (100th)	Exploit	5.21\(aazf.17\)c0	2024-06-04	< 5.21\(aazf.17\)c0
CVE-2023-37928US	—	60.2% (99th)	—	no fix	2023-11-30	≤ 5.21\(aazf.14\)c0
CVE-2023-4473US	—	41.3% (99th)	—	no fix	2023-11-30	≤ 5.21\(aazf.14\)c0
CVE-2023-35138US	—	40.0% (99th)	—	no fix	2023-11-30	≤ 5.21\(aazf.14\)c0
CVE-2023-4474US	—	29.7% (98th)	—	no fix	2023-11-30	≤ 5.21\(aazf.14\)c0
CVE-2023-5372US	—	28.5% (98th)	—	5.21\(aazf.16\)c0	2024-01-30	< 5.21\(aazf.16\)c0
CVE-2024-29974US	—	22.8% (98th)	—	5.21\(aazf.17\)c0	2024-06-04	< 5.21\(aazf.17\)c0
CVE-2024-29976US	—	8.95% (95th)	—	5.21\(aazf.17\)c0	2024-06-04	< 5.21\(aazf.17\)c0
CVE-2019-10633US	high8.8	3.24% (88th)	—	no fix	2019-04-09	≤ 5.21
CVE-2019-10631US	high8.8	2.25% (83rd)	—	no fix	2019-04-09	≤ 5.21
CVE-2024-6342US	—	2.06% (81st)	—	5.21\(aazf.18\)c0	2024-09-10	2 versions
CVE-2023-37927US	—	1.75% (78th)	—	no fix	2023-11-30	≤ 5.21\(aazf.14\)c0
CVE-2022-34747US	critical9.8	1.74% (78th)	—	5.21\(aazf.12\)c0	2022-09-06	< 5.21\(aazf.12\)c0
CVE-2019-10632US	medium6.5	1.40% (72nd)	—	no fix	2019-04-09	≤ 5.21
CVE-2023-27988US	high7.2	1.36% (72nd)	—	5.21\(aazf.13\)c0	2023-05-30	< 5.21\(aazf.13\)c0
CVE-2019-10630US	high8.8	1.16% (67th)	—	no fix	2019-04-09	≤ 5.21
CVE-2020-13364US	high8.8	1.15% (67th)	—	v5.21\(aazf.9\)c0	2020-08-06	< v5.21\(aazf.9\)c0
CVE-2020-13365US	high8.8	0.97% (62nd)	—	v5.21\(aazf.9\)c0	2020-08-06	< v5.21\(aazf.9\)c0
CVE-2023-35137US	high7.5	0.87% (59th)	—	no fix	2023-11-30	≤ 5.21\(aazf.14\)c0
CVE-2019-10634US	medium5.4	0.82% (57th)	—	no fix	2019-04-09	≤ 5.21
CVE-2024-29975US	—	0.47% (40th)	—	5.21\(aazf.17\)c0	2024-06-04	< 5.21\(aazf.17\)c0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')13 CVEs
CWE-287Improper Authentication3 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-134Use of Externally-Controlled Format String1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs
CWE-522Insufficiently Protected Credentials1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan