Zyxel

Records341All Threatist records

Exploited (KEV)13In CISA KEV

CVSS critical64CVSS 9.0–10.0

CVSS high136CVSS 7.0–8.9

Exploited now

Zyxel records in CISA KEV

TI-2026-06387 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability CRITICAL 97KEV 2026-09-21 TI-2024-27255 Zyxel DSL CPE OS Command Injection Vulnerability CRITICAL 97KEV 2025-02-11 TI-2024-27256 Zyxel DSL CPE OS Command Injection Vulnerability CRITICAL 97KEV 2025-02-11 TI-2024-10813 Zyxel Multiple Firewalls Path Traversal Vulnerability CRITICAL 99KEV 2024-12-03 TI-2017-04616 Zyxel EMG2926 Routers Command Injection Vulnerability CRITICAL 97KEV 2023-09-18 TI-2017-13541 Zyxel P660HN-T1A Routers Command Injection Vulnerability CRITICAL 100KEV 2023-08-07

Components

Products in the NVD configurations · select one to filter the records

Cloudcnm Secumanager 35 records MEDIUM Gs1900-10hp Firmware 35 records CRITICAL Usg Flex 100w Firmware 34 records CRITICAL Usg Flex 200 Firmware 34 records CRITICAL Usg Flex 500 Firmware 34 records CRITICAL Usg Flex 700 Firmware 34 records CRITICAL Usg Flex 100 Firmware 30 records CRITICAL Emg3525-t50b Firmware 28 records MEDIUM

Records

21 records in Zld · all components

TI-2024-10813 CVE-2024-11667 · GHSA-h9fh-gm4r-6cxh

Path traversal in Zyxel ATP series firmware

CRITICAL 99KEV

A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware version…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02954 Published 2024-11-27 No fix listed CWE-22

TI-2020-15281 CVE-2020-25014 · GHSA-f57w-r4hj-rw7w

A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of…

MEDIUM 49

A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0444 Published 2020-11-27 No fix listed CWE-787

TI-2025-08373 CVE-2025-9133 · GHSA-x59x-qc82-4w4p

Missing authorization in Zyxel ATP series firmware

MEDIUM 46

A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware versions from V4.16 through…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0546 Published 2025-10-21 No fix listed CWE-862

TI-2023-04062 CVE-2023-4398 · GHSA-rfqw-q592-fp2h

Integer overflow in Zyxel ATP series firmware

MEDIUM 41

An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37,…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00881 Published 2023-11-28 No fix listed CWE-190

TI-2024-28064 CVE-2024-42058 · GHSA-2cmp-5j27-vpm7

NULL pointer dereference in Zyxel ATP series firmware

MEDIUM 40

A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V5.20 thro…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00621 Published 2024-09-03 No fix listed CWE-476

TI-2024-28063 CVE-2024-42057 · GHSA-vf97-4vg7-22rv

OS command injection in Zyxel ATP series firmware

MEDIUM 40

A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versio…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0132 Published 2024-09-03 No fix listed CWE-78

TI-2025-07391 CVE-2025-8078 · GHSA-fr9h-qfx7-p4r3

OS command injection in Zyxel ATP series firmware

LOW 37

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware versions fr…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01446 Published 2025-10-21 No fix listed CWE-78

TI-2024-28066 CVE-2024-42060 · GHSA-8gxg-chh3-5hhx

OS command injection in Zyxel ATP series firmware

LOW 36

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions fr…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01339 Published 2024-09-03 No fix listed CWE-78

TI-2024-28065 CVE-2024-42059 · GHSA-xmwj-7m96-j7hw

OS command injection in Zyxel ATP series firmware

LOW 36

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware versions from V5.00 through V5.38, USG FLEX 50(W) series firmware versions fr…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01339 Published 2024-09-03 No fix listed CWE-78

TI-2024-06670 CVE-2024-7203 · GHSA-pvch-9x5f-vxhr

OS command injection in Zyxel ATP series firmware

LOW 36

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38 could allow an authenticated attacker wi…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01339 Published 2024-09-03 No fix listed CWE-78

TI-2020-17634 CVE-2020-29299 · GHSA-g8hw-8grv-27jh

Certain Zyxel products allow command injection by an admin via an input string to…

LOW 36

Certain Zyxel products allow command injection by an admin via an input string to chg_exp_pwd during a password-change action.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02372 Published 2020-12-27 No fix listed CWE-77

TI-2023-17585 CVE-2023-35139 · GHSA-wjqc-5477-jpgg

Cross-site scripting in Zyxel ATP series firmware

LOW 28

A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.37, USG FLEX series firmware versions 5.00 through 5.37, USG FLEX 50(W) series firmware versions 5.10…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00462 Published 2023-11-28 No fix listed CWE-79

TI-2024-28067 CVE-2024-42061 · GHSA-24gr-q86g-qp3p

Cross-site scripting in Zyxel ATP series firmware

LOW 27

A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00312 Published 2024-09-03 No fix listed CWE-79

TI-2023-19359 CVE-2023-37926 · GHSA-fqwh-r468-g35c

Buffer overflow in Zyxel ATP series firmware

LOW 24

A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN se…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00221 Published 2023-11-28 No fix listed CWE-120

TI-2023-19358 CVE-2023-37925 · GHSA-w6g6-83gc-85hx

Improper privilege management in Zyxel ATP series firmware

LOW 24

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware ver…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00218 Published 2023-11-28 No fix listed CWE-269

TI-2023-17582 CVE-2023-35136 · GHSA-7pcw-5pmh-x8wr

Improper input validation in Zyxel ATP series firmware

LOW 24

An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00243 Published 2023-11-28 No fix listed CWE-20

TI-2023-05491 CVE-2023-5960 · GHSA-jqv4-rmqv-7747

Improper privilege management in Zyxel USG FLEX series firmware

LOW 24

An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware versions 4.30 through 5.37 could allow an authenticated local…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00218 Published 2023-11-28 No fix listed CWE-269

TI-2023-05333 CVE-2023-5797 · GHSA-x5q7-jv6g-p5gv

Improper privilege management in Zyxel ATP series firmware

LOW 24

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00212 Published 2023-11-28 No fix listed CWE-269

TI-2023-05197 CVE-2023-5650 · GHSA-2fmp-mw85-gxqw

Improper privilege management in Zyxel ATP series firmware

LOW 24

An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 th…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00214 Published 2023-11-28 No fix listed CWE-269

TI-2024-05886 CVE-2024-6343 · GHSA-49fx-5cmv-3mw7

Buffer overflow in Zyxel ATP series firmware

LOW 23

A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00605 Published 2024-09-03 No fix listed CWE-120

TI-2023-04061 CVE-2023-4397 · GHSA-rx6q-hj2g-x8wp

Buffer overflow in Zyxel ATP series firmware

LOW 20

A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series firmware version 5.37, and USG20(W)-VPN series firmware version 5.37, could allo…

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00233 Published 2023-11-28 No fix listed CWE-120

Open these records in search →