Read the docs

Zyxel

Records341All Threatist records
Exploited (KEV)13In CISA KEV
CVSS critical64CVSS 9.0–10.0
CVSS high136CVSS 7.0–8.9

Exploited now

Zyxel records in CISA KEV
TI-2026-06387 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2026-09-21TI-2024-27255 Zyxel DSL CPE OS Command Injection Vulnerability Priority CRITICAL 97KEV 2025-02-11TI-2024-27256 Zyxel DSL CPE OS Command Injection Vulnerability Priority CRITICAL 97KEV 2025-02-11TI-2024-10813 Zyxel Multiple Firewalls Path Traversal Vulnerability Priority CRITICAL 99KEV 2024-12-03TI-2017-04616 Zyxel EMG2926 Routers Command Injection Vulnerability Priority CRITICAL 97KEV 2023-09-18TI-2017-13541 Zyxel P660HN-T1A Routers Command Injection Vulnerability Priority CRITICAL 100KEV 2023-08-07

Components

Products in the NVD configurations · select one to filter the records
Cloudcnm Secumanager 35 records MEDIUM Gs1900-10hp Firmware 35 records CRITICAL Usg Flex 100w Firmware 34 records CRITICAL Usg Flex 200 Firmware 34 records CRITICAL Usg Flex 500 Firmware 34 records CRITICAL Usg Flex 700 Firmware 34 records CRITICAL Usg Flex 100 Firmware 30 records CRITICAL Emg3525-t50b Firmware 28 records MEDIUM

Records

9 records in Zywall Vpn2s Firmware · all components

TI-2023-16200 CVE-2023-33012 · GHSA-r34v-7h65-289c

OS command injection in Zyxel ATP series firmware

Priority MEDIUM 52

A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmwa…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.09882 Published 2023-07-17 No fix listed CWE-78
TI-2023-16983 CVE-2023-34139 · GHSA-xjxm-x67w-v3c7

OS command injection in Zyxel USG FLEX series firmware

Priority MEDIUM 41

A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions 4.20 through 5.36 Patch 2, could allow an…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00759 Published 2023-07-17 No fix listed CWE-78
TI-2023-16199 CVE-2023-33011 · GHSA-cf8h-9592-vmxr

A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36…

Priority MEDIUM 40

A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.10 through 5.36 Pa…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0034 Published 2023-07-17 No fix listed CWE-134
TI-2023-13277 CVE-2023-28767 · GHSA-6hq2-q59r-h45h

OS command injection in Zyxel ATP series firmware

Priority MEDIUM 40

The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmware versions 5.00 through 5.36, USG FLEX 50(W) series firmware versions 5…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00404 Published 2023-07-17 No fix listed CWE-78
TI-2023-16985 CVE-2023-34141 · GHSA-2hgc-m6qj-p4p4

OS command injection in Zyxel ATP series firmware

Priority LOW 38

A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(…

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00684 Published 2023-07-17 No fix listed CWE-78
TI-2023-16982 CVE-2023-34138 · GHSA-886j-wm8v-5q3q

OS command injection in Zyxel ATP series firmware

Priority LOW 38

A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 through 5.36 Patch 2, USG FLEX series firmware versions 4.60 through 5.36 Patch 2, USG FLEX 50(W) series…

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00684 Published 2023-07-17 No fix listed CWE-78
TI-2021-13993 CVE-2021-35027 · GHSA-gf8r-6336-2wmx

Path traversal in Zyxel ZyWALL VPN2S Firmware

Priority LOW 37

A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02045 Published 2021-09-29 No fix listed CWE-27
TI-2021-13994 CVE-2021-35028 · GHSA-qfm3-mj8g-3hm7

OS command injection in Zyxel ZyWALL VPN2S Firmware

Priority LOW 34

A command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 could allow an authenticated, local user to execute arbitrary OS commands.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00305 Published 2021-09-29 No fix listed CWE-78
TI-2023-16984 CVE-2023-34140 · GHSA-65px-649g-rj37

Buffer overflow in Zyxel ATP series firmware

Priority LOW 29

A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series firmware versions 4.50 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 4.16 through 5.36…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.003 Published 2023-07-17 No fix listed CWE-120
Open these records in search →