high
advisory
Zyxel NWA110AX: Buffer overflow in zdp_wtp binary (CVE-2026-76955)
A buffer overflow vulnerability in the zdp_wtp binary of Zyxel NWA110AX allows for LAN-based privilege escalation.
CVE search metadata
CVE search record: CVE-2026-76955. Severity: high. CVSS: 8.8. KEV: no. Product: NWA110AX (<= 7.12). Brief: Zyxel NWA110AX: Buffer overflow in zdp_wtp binary (CVE-2026-76955). Brief link: https://feed.craftedsignal.io/briefs/2026-11-zyxel-buffer-overflow/
Triage facts
Revision 1- Applicability
- NWA110AX (<= 7.12)
- Evidence
- Unknown
- Severity
- High
- Sources
- 3 public sources
- Freshness
- Revision 1Nov 3, 04:05 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- C3Roughly even chance
A buffer overflow vulnerability exists in the zdp_wtp binary of the Zyxel NWA110AX, which allows a LAN-based attacker to escalate privileges on the device. A public exploit or PoC has been published on Sploitus for this CVE.