VULNERABILITY INTELLIGENCE

CVE-2021-35028

CVSS score7.8 HIGH

EPSS probability0.30%

CISA KEVNot currently listed

Published2021-09-29

Last modified2026-06-17

Description

A command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 could allow an authenticated, local user to execute arbitrary OS commands.