CVE-2019-10632

A directory traversal vulnerability in the file browser component on the Zyxel NAS 326 version 5.21 and below allows a lower privileged user to change the location of any other user's files...

Zyxel NAS 326 Plaintext Password Vulnerability

The Zyxel NAS 326 is a two-drive personal cloud storage device from Zyxel Hopscotch. A plaintext password vulnerability exists in Zyxel NAS 326 version 5.21 and earlier. A user with elevated privileges can exploit the vulnerability to obtain the administrator password of the device...