CVE-2018-14893: Zyxel NSA325 v2 Firmware

High severity, CVSS 8.8. EPSS: 3.4% chance of exploitation in the next 30 days.

A system command injection vulnerability in zyshclient in ZyXEL NSA325 V2 version 4.81 allows attackers to execute system commands via the web application API.

Affected products

• Zyxel NSA325 v2 Firmware: version 4.81 only

Published 2018-11-27. Last modified 2026-06-17.