AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-27992

CRITICAL · CVSS 9.8 EPSS 84.19% CISA KEV · Actively Exploited

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-06-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CISA KEV Details

Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.

Ransomware use: Unknown

Added to KEV: 2023-06-23

Required action: Apply updates per vendor instructions.

CVE
CVE-2023-27992
Severity
CRITICAL
CVSS
9.8
EPSS
84.19%

Original NVD Description

The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions prior to V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands remotely by sending a crafted HTTP request.