CVE-2009-0545: Zeroshell

High severity, CVSS 10.0. EPSS: 90.4% chance of exploitation in the next 30 days.

cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action.

Affected products

• Zeroshell Zeroshell: version 1.0 only

Published 2009-02-12. Last modified 2026-06-16.