Skip to content
Threat Feed
Subscribe

Vendor

Zyxel

7 briefs RSS
medium advisory

Remote Code Execution Vulnerability in Zyxel Firewalls

A vulnerability in Zyxel firewall firmware allows a remote, authenticated attacker to achieve arbitrary code execution on the device.

Zyxel Firewall vulnerability remote-code-execution firewall
1t
high advisory

Path Traversal Vulnerability in Zyxel Network Appliance CLI

An authenticated path traversal vulnerability in Zyxel ATP and USG series firmware allows administrators to execute arbitrary configuration files, potentially leading to command execution.

ATP series +3 path-traversal network-security firmware
1t 1c
high advisory

Command Injection in Zyxel WAX650S export-cgi

An authenticated administrator can exploit a command injection vulnerability in the export-cgi program of Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 to execute arbitrary OS commands.

WAX650S firmware cve command-injection zyxel network-infrastructure
1r 1t 1c
high advisory

Zyxel AX7501-B1 Firmware Command Injection (CVE-2026-6952)

A post-authentication command injection vulnerability (CVE-2026-6952) in the "LogServer" field of the syslog component in Zyxel AX7501-B1 firmware versions through 5.17(ABPC.7.2)C0 allows an authenticated attacker with administrator privileges to execute arbitrary OS commands on the affected device.

AX7501-B1 firmware command-injection vulnerability router network-device
1t 1c
medium advisory

CVE-2026-7287 - Zyxel NWA1100-N Buffer Overflow Vulnerability

A buffer overflow vulnerability in Zyxel NWA1100-N firmware allows a remote attacker to cause a denial-of-service by sending a crafted HTTP request to the webs binary.

NWA1100-N customized firmware dos buffer overflow cve-2026-7287
2r 2t 1c
high advisory

Zyxel WRE6505 v2 Command Injection Vulnerability (CVE-2026-7256)

A command injection vulnerability (CVE-2026-7256) in Zyxel WRE6505 v2 firmware allows an adjacent attacker on the LAN to execute arbitrary OS commands by sending a crafted HTTP request.

WRE6505 v2 firmware version V1.00 command injection zyxel cve-2026-7256 network device
2r 1t 1c
high advisory

Zyxel Command Injection Vulnerabilities in CPE and Extenders

Zyxel released a security advisory on April 28, 2026, addressing command injection vulnerabilities across multiple versions of their 4G LTE/5G NR CPE, DSL/Ethernet CPE, Fiber ONTs, and Wireless Extender products, potentially allowing attackers to execute arbitrary commands.

4G LTE/5G NR CPE +3 command injection network device vulnerability
2r 1t