CVE-2018-14892: Zyxel NSA325 v2 Firmware

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Missing protections against Cross-Site Request Forgery in the web application in ZyXEL NSA325 V2 version 4.81 allow attackers to perform state-changing actions via crafted HTTP forms.

Affected products

• Zyxel NSA325 v2 Firmware: version 4.81 only

Published 2018-11-27. Last modified 2026-06-17.