Vendor
Zyxel
176 known vulnerabilities.
Zyxel at a glance
1 of the exploited vulnerabilities are known to be used by ransomware (CISA).
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 2 | 0 |
| Oct 2026 | 1 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 7 | 1 |
| Jul 2026 | 1 | 0 |
| Jun 2026 | 3 | 0 |
| May 2026 | 5 | 0 |
| Apr 2026 | 3 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 8 | 1 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 2 | 0 |
| Oct 2025 | 2 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 2 | 1 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 3 | 0 |
| Mar 2025 | 3 | 0 |
| Feb 2025 | 3 | 1 |
| Jan 2025 | 1 | 0 |
| Dec 2024 | 3 | 0 |
Most common weaknesses
Products
USG FLEX series firmware 51
ATP series firmware 49
VPN series Firmware 37
USG FLEX 50(W) series firmware 28
USG20(W)-VPN series firmware 28
NAS326 firmware 15
NAS542 firmware 14
USG FLEX 50(W) firmware 11
USG20(W)-VPN firmware 8
USG/Zywall series Firmware 8
VMG8825-T50K firmware 8
VMG3625-T50B firmware 7
WAC500 firmware 7
WBE660S firmware 5
NWA50AX firmware 5
ZyWALL/USG series firmware 5
NBG-418N v2 firmware 5
NR7101 firmware 5
NXC2500 firmware 4
WRE6505 v2 firmware 4
WAH7601 4
GS1900-8 firmware 4
GS1900-48 firmware 4
WX3100-T0 firmware 4
VMG4325-B10A firmware 3
NSG series firmware 3
WAX510D firmware 3
GS1900-8HP firmware 3
GS1900-10HP firmware 3
GS1900-24EP firmware 3
USG FLEX 100(W) firmware 3
USG FLEX 200 firmware 3
USG FLEX 500 firmware 3
USG FLEX 700 firmware 3
USG 20(W)-VPN firmware 3
WAX300H firmware 3
USG FLEX H series uOS firmware 3
NWA110AX firmware 3
WBE530 firmware 2
DX5401-B0 firmware 2
Latest advisories
-
High max 8.8NCSC-2026-0468 1 CVE
Kwetsbaarheid verholpen in Zyxel product
Zyxel heeft een kwetsbaarheid verholpen in de firmware van de Zyxel GS1900-24E netwerk switch, specifiek in versie 2.90(AAHK.2)C0 en eerder.
-
Critical max 8.8WID-SEC-2026-4330 1 CVE
Zyxel Switch: Schwachstelle ermöglicht Codeausführung
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Zyxel Switch ausnutzen, um beliebigen Programmcode auszuführen.
-
Medium max 7.2WID-SEC-2026-2627 1 CVE
Zyxel Firewall: Schwachstelle ermöglicht Codeausführung
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Zyxel Firewall ausnutzen, um beliebigen Programmcode auszuführen.
-
Medium max 7.2
Zyxel Firewall: Schwachstelle ermöglicht Codeausführung
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Zyxel Firewalls ausnutzen, um beliebigen Programmcode auszuführen.
first Feb 4, 2026 -
High max 8.1WID-SEC-2025-2346 2 CVEs
Zyxel Firewall: Mehrere Schwachstellen
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Zyxel Firewall ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.
176 results · Feed
-
High 8.8
A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could …
-
High 8.8CVE-2026-107441 Public exploit
An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 co…
-
Medium 6.5
An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.…
-
High 8.2
Exposure of Sensitive Information to an Unauthorized Actor in Zyxel's WAH7601
Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data. This issue affects WAH7601: through 20072026.
-
Critical 9.8
Multiple Vulnerabilities in Zyxel's WAH7601 - OS Command Injection
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zyxel Networks WAH7601 allows OS Command Injection. This issue affects WAH7601: through 20072026.
-
Medium 6.5
Sensitive Data Exposure in Zyxel WAH7601 Router
Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting. This issue affects WAH7601: through 20072026.
-
High 7.3
Hardcoded Credentials in Zyxel WAH7601 Router
Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable. This issue affects WAH7601: through 20.07.2026.
-
High 7.2
A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware vers…
-
Medium 6.5CVE-2026-8508 Public exploit
An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions throu…
-
High 7.2CVE-2026-6837 Public exploit
A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware version…
-
High 7.2CVE-2026-6952 Public exploit
A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-…
-
High 8.8CVE-2026-7273 Exploited
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(AB…
KEV Sep 21, 2026 -
Medium 6.5
A buffer overflow vulnerability in the UPnP DeletePortMapping() command in Zyxel VMG4005-B50B firmware versions through…
-
Medium 6.5
A buffer overflow vulnerability in the UPnP AddPortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.…
-
Medium 6.5
A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00(ACPS.2)C0, GS1200-8v3 firmware…
-
High 7.5
** UNSUPPORTED WHEN ASSIGNED ** A buffer overflow vulnerability in the formWep(), formWlAc(), formPasswordSetup(), form…
-
Medium 4.4
** UNSUPPORTED WHEN ASSIGNED ** An insecure storage of sensitive information vulnerability in the configuration file of…
-
High 8.8
** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware versi…
-
Medium 6.5
** UNSUPPORTED WHEN ASSIGNED ** An improper restriction of excessive authentication attempts vulnerability in the web m…
-
High 7.2
A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Z…
-
Medium 6.8
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions…
-
Medium 4.5
** UNSUPPORTED WHEN ASSIGNED ** An improper encoding or escaping vulnerability in the CGI program of Zyxel WRE6505 v2 f…
-
High 7.2CVE-2026-1459 Public exploit
A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG36…
-
High 8.8
A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware…
-
Critical 9.8
A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)…
-
Medium 4.9
A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version thro…
-
Medium 4.9
A null pointer dereference vulnerability in the IP settings CGI program of the Zyxel VMG3625-T50B firmware versions thr…
-
Medium 4.9
A null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625-T50B firmware version…
-
Medium 4.9
A null pointer dereference vulnerability in the certificate downloader CGI program of the Zyxel VMG3625-T50B firmware v…
-
High 7.2
A post‑authentication command injection vulnerability in the Dynamic DNS (DDNS) configuration CLI command in Zyxel ATP …
-
High 8.8
A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(…
-
Medium 5.3
An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)…
-
High 8.1
A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series f…
-
High 7.2
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, U…
-
Critical 9.8
A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prio…
-
High 7.2
A path traversal vulnerability in the file_upload-cgi CGI program of Zyxel NWA50AX PRO firmware version 7.10(ACGE.2) an…
-
Medium 4.9CVE-2025-3577 EPSS 13%
**UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B …
-
Medium 6.7
An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS firmware ver…
-
High 7.8CVE-2025-1731 Public exploit
An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware…
-
High 7.2
A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware …