CVE-2021-41738: Zeroshell

High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days.

ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticated attacker to execute system commands.

Affected products

• Zeroshell Zeroshell: version 3.9.5 only

Published 2022-06-11. Last modified 2026-06-17.