Skip to content
Threat Feed
Subscribe

Vendor

Zyxel

3 briefs RSS
medium advisory

CVE-2026-7287 - Zyxel NWA1100-N Buffer Overflow Vulnerability

A buffer overflow vulnerability in Zyxel NWA1100-N firmware allows a remote attacker to cause a denial-of-service by sending a crafted HTTP request to the webs binary.

NWA1100-N customized firmware dos buffer overflow cve-2026-7287
2r 2t 1c
high advisory

Zyxel WRE6505 v2 Command Injection Vulnerability (CVE-2026-7256)

A command injection vulnerability (CVE-2026-7256) in Zyxel WRE6505 v2 firmware allows an adjacent attacker on the LAN to execute arbitrary OS commands by sending a crafted HTTP request.

WRE6505 v2 firmware version V1.00 command injection zyxel cve-2026-7256 network device
2r 1t 1c
high advisory

Zyxel Command Injection Vulnerabilities in CPE and Extenders

Zyxel released a security advisory on April 28, 2026, addressing command injection vulnerabilities across multiple versions of their 4G LTE/5G NR CPE, DSL/Ethernet CPE, Fiber ONTs, and Wireless Extender products, potentially allowing attackers to execute arbitrary commands.

4G LTE/5G NR CPE +3 command injection network device vulnerability
2r 1t