Skip to content
OpenAdvisories
High · 8.8 CVE-2026-7256 EUVD-2026-29376GHSA-c7j6-24cr-x2rf

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 c…

Published May 12, 2026 · Updated May 12, 2026 · Assigned by Zyxel

Vendor: Zyxel Product: WRE6505 v2 firmware Category: Network devices

Description

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to execute operating system (OS) commands on a vulnerable device by sending a crafted HTTP request.

Affected products

VendorProductAffectedFixed
Zyxel WRE6505 v2 firmware V1.00(ABDV.3)C0 —

References