Zyxel has released fixes for at least 15 major security vulnerabilities impacting its network access storage devices, firewalls, and access points, according to SecurityWeek. Six different flaws, including command injection and authentication bypass bugs, impacting Zyxel’s NAS226 and NAS542 devices could be leveraged to facilitate sensitive system data exfiltration and operating system command execution through malicious URLs.

Source: SC Magazine