Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-7673 EUVD-2025-21579GHSA-r3pp-h225-m34v

A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0…

Published Jul 16, 2025 · Updated Feb 26, 2026 · Assigned by Zyxel

Description

A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and potentially execute arbitrary code by sending a specially crafted HTTP request.

Affected products

VendorProductAffectedFixed
Zyxel VMG8825-T50K firmware < V5.50(ABOM.5)C0 —

References