CVE-2021-4039: Zyxel NWA1100-Nh Firmware

Critical severity, CVSS 9.8. EPSS: 71% chance of exploitation in the next 30 days.

A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device.

Affected products

• Zyxel NWA1100-Nh Firmware: before 2.12\(aasi.3\)c0 (fixed in 2.12\(aasi.3\)c0)

Published 2022-03-01. Last modified 2026-06-17.