Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-12489 EUVD-2026-104789GHSA-c3cx-qmjc-794q

An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0 could a…

Published Oct 20, 2026 · Updated Nov 4, 2026 · Assigned by Zyxel

Description

An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0 could allow an authenticated attacker to escalate privileges by modifying the login_privilege data on an affected device.

Affected products

VendorProductAffectedFixed
Zyxel EX3501-T0 firmware <= 5.44(ACHR.6)C0 —

References