IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen

Zyxel Networks Schwachstellen (CVE)

Für Zyxel Networks veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

vmg8623-t50b firmware 13emg3525-t50b firmware 13emg5523-t50b firmware 13VMG3625-T50B firmware 13AX7501-B1 firmware 12ee6510-10 firmware 12EX3501-T0 firmware 12px5301-t0 firmware 12dx5401-b1 firmware 12ex5512-t0 firmware 12EX3301-T0 firmware 11ex5601-t0 firmware 11ex3500-t0 firmware 11EX5601-T1 firmware 11ex7501-b0 firmware 11wx5600-t0 firmware 11DX3300-T0 firmware 11ex7710-b0 firmware 11dx3300-t1 firmware 11ex3600-t0 firmware 11DX3301-T0 firmware 11ex5401-b1 firmware 11ex3300-t0 firmware 11ex5510-b0 firmware 11ex3300-t1 firmware 11px3321-t1 firmware 10EX3510-B0 firmware 10wx5610-b0 firmware 10dx4510-b1 firmware 10WX3100-T0 firmware 9ee5301-00 firmware 9ATP series firmware 9ex3510-b1 firmware 9vmg4005-b50a firmware 9pe3301-00 firmware 9pe5301-01 firmware 9we3300-00 firmware 9vmg4005-b60a firmware 9ee3301-00 firmware 9wx3401-b1 firmware 8
56 Ergebnisse
8.8Hoch
CVE-2026-76955
Zyxel NWA110AX firmware

A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could allow a LAN-based attacker to escalate privileges on an affected device.

8.8Hoch
CVE-2026-107441
Zyxel GS1900-24E firmware; Zyxel GS1900-8 firmware; Zyxel GS1900-8HP firmware; Zyxel GS1900-10HP firmware

An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an unauthenticated adjacent attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.

6.5Mittel
CVE-2026-12489
Zyxel EX3501-T0 firmware

An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0 could allow an authenticated attacker to escalate privileges by modifying the login_privilege data on an affected device.

6.5Mittel
CVE-2026-6373

Sensitive Data Exposure in Zyxel WAH7601 Router

Zyxel Networks WAH7601

Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting. This issue affects WAH7601: through 20072026.

7.2Hoch
CVE-2026-14818
Zyxel ATP series firmware; Zyxel USG FLEX series firmware; Zyxel USG FLEX 50(W) series firmware; Zyxel USG20(W)-VPN series firmware

A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50(W) series firmware ve…

6.5Mittel
CVE-2026-8508
Zyxel WAX650S firmware

An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an attacker on the WLAN to bypass captive portal authentication.

7.2Hoch
CVE-2026-6837
Zyxel WAX650S firmware

A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device.

1.5%EPSS
7.2Hoch
CVE-2026-6952
Zyxel AX7501-B1 firmware

A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-B1 firmware versions through 5.17(ABPC.7.2)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on …

1.5%EPSS
8.8Hoch
CVE-2026-7273 KEV

Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability

Zyxel GS1900-48HPv2 firmware; Zyxel GS1900-8 firmware; Zyxel GS1900-8HP firmware; Zyxel GS1900-10HP firmware

A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.

2.8%EPSS
6.5Mittel
CVE-2026-3871
Zyxel VMG4005-B50B firmware

A buffer overflow vulnerability in the UPnP DeletePortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 could allow an adjacent attacker to trigger a temporary denial-of-service (DoS) condition affecting the UPnP function of t…

6.5Mittel
CVE-2026-3870
Zyxel VMG4005-B50B firmware

A buffer overflow vulnerability in the UPnP AddPortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 could allow an adjacent attacker to trigger a temporary denial-of-service (DoS) condition affecting the UPnP function of the …

6.5Mittel
CVE-2026-4795
Zyxel GS1200-5v3 firmware; Zyxel GS1200-8v3 firmware; Zyxel GS1200-5HPv3 firmware; Zyxel GS1200-8HPv3 firmware

A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00(ACPS.2)C0, GS1200-8v3 firmware versions through 1.00(ACPT.2)C0,  GS1200-5HPv3 firmware versions through 1.00(ACPU.2)C0, GS1200-8HPv3 firmware versions through 1.00(ACPV.2…

7.5Hoch
CVE-2026-7287
Zyxel NWA1100-N firmware

** UNSUPPORTED WHEN ASSIGNED ** A buffer overflow vulnerability in the formWep(), formWlAc(), formPasswordSetup(), formUpgradeCert(), and formDelcert() functions of the “webs” binary in Zyxel NWA1100-N customized firmware version 1.00(AACE.1)C0 could allow an…

4.4Mittel
CVE-2026-7257
Zyxel WRE6505 v2 firmware

** UNSUPPORTED WHEN ASSIGNED ** An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow a local attacker with administrator privileges to download and decrypt a back…

8.8Hoch
CVE-2026-7256
Zyxel WRE6505 v2 firmware

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to execute operating system (OS) commands on a vulnerable device by sending a…

1.0%EPSS
6.5Mittel
CVE-2026-7255
Zyxel WRE6505 v2 firmware

** UNSUPPORTED WHEN ASSIGNED ** An improper restriction of excessive authentication attempts vulnerability in the web management interface of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to brute-force the pass…

7.2Hoch
CVE-2026-1460
Zyxel DX3301-T0 firmware; Zyxel EX3301-T0 firmware

A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated attacker with administrator privileges …

1.2%EPSS
6.8Mittel
CVE-2026-0711
Zyxel DX3300-T0 firmware

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affecte…

4.5Mittel
CVE-2026-6058
Zyxel WRE6505 v2 firmware

** UNSUPPORTED WHEN ASSIGNED ** An improper encoding or escaping vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the WLAN to cause a denial-of-service (DoS) condition in the web managem…

7.2Hoch
CVE-2026-1459
Zyxel VMG3625-T50B firmware

A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.7)C0 could allow an authenticated attacker with administrator privileges to execute operating …

8.8Hoch
CVE-2025-13943
Zyxel EX3301-T0 firmware

A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50(ABVY.7)C0 could allow an authenticated attacker to execute operating system (OS) commands on an affected device.

1.5%EPSS
9.8Kritisch
CVE-2025-13942
Zyxel EX3510-B0 firmware

A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating system (OS) commands on an affected device by sending specially crafted UPnP SOAP requests.

1.2%EPSS