Vendor
Zyxel
176 known vulnerabilities.
Products
USG FLEX series firmware 51
ATP series firmware 49
VPN series Firmware 37
USG FLEX 50(W) series firmware 28
USG20(W)-VPN series firmware 28
NAS326 firmware 15
NAS542 firmware 14
USG FLEX 50(W) firmware 11
USG20(W)-VPN firmware 8
USG/Zywall series Firmware 8
VMG8825-T50K firmware 8
VMG3625-T50B firmware 7
WAC500 firmware 7
WBE660S firmware 5
NWA50AX firmware 5
ZyWALL/USG series firmware 5
NBG-418N v2 firmware 5
NR7101 firmware 5
NXC2500 firmware 4
WRE6505 v2 firmware 4
WAH7601 4
GS1900-8 firmware 4
GS1900-48 firmware 4
WX3100-T0 firmware 4
VMG4325-B10A firmware 3
NSG series firmware 3
WAX510D firmware 3
GS1900-8HP firmware 3
GS1900-10HP firmware 3
GS1900-24EP firmware 3
USG FLEX 100(W) firmware 3
USG FLEX 200 firmware 3
USG FLEX 500 firmware 3
USG FLEX 700 firmware 3
USG 20(W)-VPN firmware 3
WAX300H firmware 3
USG FLEX H series uOS firmware 3
NWA110AX firmware 3
WBE530 firmware 2
DX5401-B0 firmware 2
10 results · Clear filters · Feed
-
High 8.8CVE-2026-7273 Exploited
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(AB…
KEV Sep 21, 2026 -
High 8.8
**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the l…
KEV Feb 11, 2025 -
High 8.8
**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DS…
KEV Feb 11, 2025 -
High 7.5CVE-2024-11667 Exploited · Ransomware
A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through…
KEV Dec 3, 2024 -
Critical 9.8
The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0,…
KEV Jun 23, 2023 -
Critical 9.8
A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Pa…
KEV Jun 5, 2023 -
Critical 9.8
A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 P…
KEV Jun 5, 2023 -
Critical 9.8
Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware ver…
KEV May 31, 2023 -
Critical 9.8
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pa…
KEV May 16, 2022 -
Critical 9.8
ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi
Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyXEL NAS de…
KEV Mar 25, 2022