Zyxel

Records341All Threatist records

Exploited (KEV)13In CISA KEV

CVSS critical64CVSS 9.0–10.0

CVSS high136CVSS 7.0–8.9

Exploited now

Zyxel records in CISA KEV

TI-2026-06387 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability CRITICAL 97KEV 2026-09-21 TI-2024-27255 Zyxel DSL CPE OS Command Injection Vulnerability CRITICAL 97KEV 2025-02-11 TI-2024-27256 Zyxel DSL CPE OS Command Injection Vulnerability CRITICAL 97KEV 2025-02-11 TI-2024-10813 Zyxel Multiple Firewalls Path Traversal Vulnerability CRITICAL 99KEV 2024-12-03 TI-2017-04616 Zyxel EMG2926 Routers Command Injection Vulnerability CRITICAL 97KEV 2023-09-18 TI-2017-13541 Zyxel P660HN-T1A Routers Command Injection Vulnerability CRITICAL 100KEV 2023-08-07

Components

Products in the NVD configurations · select one to filter the records

Cloudcnm Secumanager 35 records MEDIUM Gs1900-10hp Firmware 35 records CRITICAL Usg Flex 100w Firmware 34 records CRITICAL Usg Flex 200 Firmware 34 records CRITICAL Usg Flex 500 Firmware 34 records CRITICAL Usg Flex 700 Firmware 34 records CRITICAL Usg Flex 100 Firmware 30 records CRITICAL Emg3525-t50b Firmware 28 records MEDIUM

Records

11 records in Nwa110ax Firmware · all components

TI-2024-06726 CVE-2024-7261 · GHSA-4c9r-w43c-8v76

OS command injection in Zyxel NWA1123ACv3 firmware

MEDIUM 62

The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4) and earlier, WAC500 firmware version 6.70(ABVS.4) and earlier, WAX655E firmwar…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11408 Published 2024-09-03 No fix listed CWE-78

TI-2022-09869 CVE-2022-26531 · GHSA-rg7w-p5vw-jmcc

Improper input validation in Zyxel USG/ZyWALL series firmware

MEDIUM 43

Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0637 Published 2022-05-24 No fix listed CWE-20

TI-2022-09870 CVE-2022-26532 · GHSA-gfh5-53xq-j227

OS command injection in Zyxel USG/ZyWALL series firmware

MEDIUM 42

A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04789 Published 2022-05-24 No fix listed CWE-88

TI-2024-11502 CVE-2024-12398 · GHSA-29rw-7xhw-cxx2

Improper privilege management in Zyxel WBE530 firmware

MEDIUM 41

An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated us…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00532 Published 2025-01-14 No fix listed CWE-269

TI-2023-05872 CVE-2023-6398 · GHSA-p6jh-65c7-8r26

OS command injection in Zyxel ATP series firmware

LOW 36

A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01333 Published 2024-02-20 Fixed in 6.29(ABYW.4), 6.70(ABVS.1) +2 CWE-78

TI-2025-05667 CVE-2025-6265 · GHSA-gphq-p3w8-j8vc

Path traversal in Zyxel NWA50AX PRO firmware

LOW 35

A path traversal vulnerability in the file_upload-cgi CGI program of Zyxel NWA50AX PRO firmware version 7.10(ACGE.2) and earlier could allow an authenticated attacker with administrator privileges to access specific dire…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00617 Published 2025-07-15 No fix listed CWE-22

TI-2023-09056 CVE-2023-22918 · GHSA-q9h2-893q-85gq

A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP…

LOW 32

A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50(W) firmware versions 4…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00771 Published 2023-04-24 No fix listed CWE-359

TI-2024-01471 CVE-2024-1575 · GHSA-w52f-78r3-v89r

Improper privilege management in Zyxel WBE660S firmware

LOW 29

The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a v…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00323 Published 2024-07-23 No fix listed CWE-269

TI-2023-19358 CVE-2023-37925 · GHSA-w6g6-83gc-85hx

Improper privilege management in Zyxel ATP series firmware

LOW 24

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware ver…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00218 Published 2023-11-28 No fix listed CWE-269

TI-2023-05333 CVE-2023-5797 · GHSA-x5q7-jv6g-p5gv

Improper privilege management in Zyxel ATP series firmware

LOW 24

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00212 Published 2023-11-28 No fix listed CWE-269

TI-2022-22656 CVE-2022-45854 · GHSA-qm64-6g3m-3xmv

Improper check for unusual conditions in Zyxel NWA110AX firmware

LOW 20

An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow a LAN attacker to cause a temporary denial-of-service (DoS) by sending crafted VLAN frames if the MA…

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00279 Published 2023-02-07 Fixed in 6.50(ABTG.0)C0 CWE-754

Open these records in search →