Zyxel

19 results · Clear filters · Feed

• High 8.8
  CVE-2026-107441 Public exploit

  An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 co…

  Zyxel GS1900-48 firmware GS1900-8 firmware GS1900-8HP firmware Network devices
  Nov 3, 2026
• Medium 6.5
  CVE-2026-8508 Public exploit

  An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions throu…

  Zyxel WAX650S firmware Network devices
  Aug 4, 2026
• High 7.2
  CVE-2026-6837 Public exploit

  A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware version…

  Zyxel WAX650S firmware Network devices
  Aug 4, 2026
• High 7.2
  CVE-2026-6952 Public exploit

  A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-…

  Zyxel AX7501-B1 firmware Network devices
  Jul 21, 2026
• High 7.2
  CVE-2026-1459 Public exploit

  A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG36…

  Zyxel VMG3625-T50B firmware Network devices
  Feb 24, 2026
• High 7.8
  CVE-2025-1731 Public exploit

  An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware…

  Zyxel USG FLEX H series uOS firmware Network devices
  Apr 22, 2025
• Critical 9.8
  CVE-2025-0890 Public exploit EPSS 14%

  **UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-…

  Zyxel VMG4325-B10A firmware Network devices
  Feb 4, 2025
• High 8.8
  CVE-2024-40891 Exploited Public exploit EPSS 23%

  **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the l…

  Zyxel VMG4325-B10A firmware Network devices
  Feb 4, 2025

  KEV Feb 11, 2025
• Critical 9.8
  CVE-2024-29973 Public exploit Scanner template EPSS 86%

  ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmwa…

  Zyxel NAS326 firmware NAS542 firmware Network devices
  Jun 4, 2024
• Critical 9.8
  CVE-2024-29972 Public exploit Scanner template EPSS 90%

  ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS32…

  Zyxel NAS326 firmware NAS542 firmware Network devices
  Jun 4, 2024
• High 8.8
  CVE-2023-33012 Public exploit

  A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.…

  Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices
  Jul 17, 2023
• High 7.5
  CVE-2023-28770 Public exploit EPSS 58%

  The sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0 firmw…

  Zyxel DX5401-B0 firmware Network devices
  Apr 27, 2023
• Critical 9.8
  CVE-2023-28769 Public exploit

  The buffer overflow vulnerability in the library “libclinkc.so” of the web server “zhttpd” in Zyxel DX5401-B0 firmware …

  Zyxel DX5401-B0 firmware Network devices
  Apr 27, 2023
• Critical 9.8
  CVE-2023-28771 Exploited Public exploit EPSS 99%

  Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware ver…

  Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices
  Apr 25, 2023

  KEV May 31, 2023
• High 7.8
  CVE-2022-30526 Public exploit

  A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 …

  Zyxel ATP series firmware VPN series Firmware USG FLEX 50(W) firmware Network devices
  Jul 19, 2022
• Critical 9.8
  CVE-2022-30525 Exploited Public exploit Scanner template EPSS 100%

  A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pa…

  Zyxel ATP series firmware VPN series Firmware USG FLEX 50(W) firmware Network devices
  May 12, 2022

  KEV May 16, 2022
• Critical 9.8
  CVE-2021-4039 Public exploit EPSS 71%

  A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to exe…

  Zyxel NWA1100-NH firmware Network devices
  Mar 1, 2022
• Medium 6.5
  CVE-2021-35036 Public exploit

  A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allo…

  Zyxel VMG3625-T50B firmware Network devices
  Mar 1, 2022
• Critical 9.8
  CVE-2020-9054 Exploited Public exploit Scanner template EPSS 100%

  ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi

  Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyXEL NAS de…

  Zyxel NSA220 NSA310 NAS326 Network devices
  Mar 4, 2020

  KEV Mar 25, 2022