Read the docs

Zyxel

Records341All Threatist records
Exploited (KEV)13In CISA KEV
CVSS critical64CVSS 9.0–10.0
CVSS high136CVSS 7.0–8.9

Exploited now

Zyxel records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in Emg6726-b10a Firmware · all components

Priority MEDIUM 51

A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating system (OS) commands on an affected device by s…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0117 Published 2026-02-24 No fix listed CWE-78
Priority MEDIUM 50

A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unauthenticated attacker to cause denial-of-service (DoS) conditi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00652 Published 2025-07-16 Fixed in V5.50(ABOM.5)C0 CWE-120
Priority MEDIUM 43

A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50(ABVY.7)C0 could allow an authenticated attacker to execute operating system (O…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01541 Published 2026-02-24 No fix listed CWE-78
Priority LOW 39

An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service (DoS) attacks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00335 Published 2025-11-18 No fix listed CWE-400
Priority LOW 39

A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an attacker to cause a temporary denial of service…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0052 Published 2024-12-03 No fix listed CWE-120
Priority LOW 36

A post-authentication command injection vulnerability in the "host" parameter of the diagnostic function in Zyxel VMG4005-B50A firmware versions through V5.15(ABQA.2.2)C0 could allow an authenticated attacker with admini…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01167 Published 2024-12-03 No fix listed CWE-78
Priority LOW 36

A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable device via a LAN inte…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00696 Published 2022-04-11 No fix listed CWE-78
Priority LOW 26

A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local authenticated attacker to cause a denial of s…

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00208 Published 2022-04-11 No fix listed CWE-120
Open these records in search →