Zyxel Releases Patches for Firmware Vulnerabilities in EoL NAS Models

Zyxel released updates addressing five critical vulnerabilities in EoL NAS models NAS326 and NAS542 — three allow unauthenticated command injection/RCE and two are privilege-escalation issues; patches are available for some versions but two authenticated privilege-escalation flaws remain unpatched. Shadowserver reported exploitation attempts targeting CVE-2024-29973 to deliver a Mirai-like botnet, so users are advised to apply updates or migrate to supported devices.