Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-0711 EUVD-2026-25968GHSA-8358-7fqv-7hg5

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7…

Published Apr 28, 2026 · Updated Apr 29, 2026 · Assigned by Zyxel

Vendor: Zyxel Product: DX3300-T0 firmware Category: Network devices

Description

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device.

Affected products

VendorProductAffectedFixed
Zyxel DX3300-T0 firmware <= 5.50(ABVY.7.1)C0 —

References