Zyxel vulnerabilities

Products

• Usg Flex Series Firmware 51
• Atp Series Firmware 49
• Vpn Series Firmware 37
• Cloudcnm Secumanager 35
• Gs1900-10hp Firmware 35
• Usg Flex 100w Firmware 34
• Usg Flex 200 Firmware 34
• Usg Flex 500 Firmware 34
• Usg Flex 700 Firmware 34
• Usg Flex 50w Firmware 32
• Atp800 Firmware 30
• Usg Flex 100 Firmware 30
• Emg3525-t50b Firmware 28
• Emg5523-t50b Firmware 28
• Usg20(w)-vpn Series Firmware 28
• Usg Flex 50(w) Series Firmware 28
• Vmg8623-t50b Firmware 28
• Atp100 Firmware 25
• Atp200 Firmware 25
• Atp500 Firmware 25
• Vmg3625-t50b Firmware 25
• Dx3301-t0 Firmware 24
• Nas326 Firmware 24
• Vpn100 Firmware 24
• Vpn300 Firmware 24
• Vpn50 Firmware 24
• Atp100w Firmware 23
• Atp700 Firmware 23
• Ex3301-t0 Firmware 23
• Ex5512-t0 Firmware 23
• Ex5601-t0 Firmware 23
• Ex5601-t1 Firmware 23
• Usg Flex 50 Firmware 23
• Vpn1000 Firmware 23
• Wx5600-t0 Firmware 23
• Dx5401-b0 Firmware 22
• Ex3510-b0 Firmware 22
• Dx5401-b1 Firmware 21
• Emg5723-t50k Firmware 21
• Ex5510-b0 Firmware 21

Show 160 moreShow less

• Usg 20w-vpn Firmware 21
• Vmg3927-t50k Firmware 21
• Vmg8825-t50k Firmware 21
• Zld 21
• Ax7501-b1 Firmware 20
• Dx3300-t1 Firmware 20
• Ex3300-t1 Firmware 20
• Ex3500-t0 Firmware 20
• Ex3501-t0 Firmware 20
• Ex5401-b0 Firmware 20
• Ex5401-b1 Firmware 20
• Pm7300-t0 Firmware 20
• Vmg4005-b50a Firmware 20
• Vmg4005-b60a Firmware 20
• Wx3100-t0 Firmware 20
• Ax7501-b0 Firmware 19
• Dx4510-b1 Firmware 19
• Ex7710-b0 Firmware 19
• Dx3300-t0 Firmware 18
• Ex3300-t0 Firmware 18
• Ex7501-b0 Firmware 18
• Nas542 Firmware 18
• Px3321-t1 Firmware 18
• Ex3600-t0 Firmware 17
• Gs1900-24 Firmware 17
• Gs1900-8 Firmware 17
• Pm3100-t0 Firmware 17
• Pm5100-t0 Firmware 17
• Gs1900-16 Firmware 16
• Gs1900-24e Firmware 16
• Gs1900-48 Firmware 16
• Gs1900-8hp Firmware 16
• Usg20-vpn Firmware 16
• Dx4510-b0 Firmware 15
• Ex3510-b1 Firmware 15
• Nas326 Firmware 15
• Usg20w-vpn Firmware 15
• Zynos 15
• Ee6510-10 Firmware 14
• Ex5501-b0 Firmware 14
• Nas542 Firmware 14
• Px5301-t0 Firmware 14
• Usg 2200-vpn Firmware 14
• Wx3401-b0 Firmware 13
• Wx5610-b0 Firmware 13
• Nwa110ax Firmware 11
• Nwa210ax Firmware 11
• Usg Flex 50(w) Firmware 11
• Wax510d Firmware 11
• Wax610d Firmware 11
• Wax630s Firmware 11
• Wax650s Firmware 11
• Gs1900-24ep Firmware 10
• Gs1900-24hpv2 Firmware 10
• Gs1900-48hpv2 Firmware 10
• Lte3301-plus Firmware 10
• Nebula Lte3301-plus Firmware 10
• Nwa50ax Firmware 10
• Nwa55axe Firmware 10
• Nwa90ax Firmware 10
• Usg210 Firmware 10
• Usg310 Firmware 10
• Usg Flex 700h Firmware 10
• Wac500h Firmware 10
• Ee3301-00 Firmware 9
• Ee5301-00 Firmware 9
• Gs1900-24hp Firmware 9
• Gs1900-48hp Firmware 9
• Nebula Nr7101 Firmware 9
• Nr7101 Firmware 9
• Nwa1123acv3 Firmware 9
• Pe3301-00 Firmware 9
• Pe5301-01 Firmware 9
• Usg40 Firmware 9
• Usg40w Firmware 9
• Usg60 Firmware 9
• Usg60w Firmware 9
• Wac500 Firmware 9
• We3300-00 Firmware 9
• Wx3401-b1 Firmware 9
• Zywall Vpn100 Firmware 9
• Zywall Vpn2s Firmware 9
• Zywall Vpn300 Firmware 9
• Emg6726-b10a Firmware 8
• Ex2210-t0 Firmware 8
• Gm4100-b0 Firmware 8
• Lte7480-m804 Firmware 8
• Nbg-418n Firmware 8
• Nebula Fwa510 Firmware 8
• Nebula Fwa710 Firmware 8
• Nwa220ax-6e Firmware 8
• Prestige 660 8
• Prestige 661 8
• Usg20(w)-vpn Firmware 8
• Usg/zywall Series Firmware 8
• Vmg4927-b50a Firmware 8
• Vmg8825-t50k Firmware 8
• Wax620d-6e Firmware 8
• Wax640s-6e Firmware 8
• Wax655e Firmware 8
• Zywall 1100 Firmware 8
• Zywall 110 Firmware 8
• Zywall 310 Firmware 8
• Zywall Vpn 100 Firmware 8
• Zywall Vpn 300 Firmware 8
• Zywall Vpn 50 Firmware 8
• Zywall Vpn50 Firmware 8
• Ex5600-t1 Firmware 7
• Lte7490-m904 Firmware 7
• Nebula Fwa505 Firmware 7
• Nr7102 Firmware 7
• Pm7500-00 Firmware 7
• Pmg5317-t20b Firmware 7
• Pmg5617ga Firmware 7
• Pmg5622ga Firmware 7
• Prestige 7
• Usg 40 Firmware 7
• Usg 40w Firmware 7
• Usg 60 Firmware 7
• Usg 60w Firmware 7
• Vmg3625-t50b Firmware 7
• Wac500 Firmware 7
• Wbe660s Firmware 7
• Zywall Atp100 Firmware 7
• Zywall Atp100w Firmware 7
• Zywall Atp200 Firmware 7
• Zywall Atp500 Firmware 7
• Zywall Atp700 Firmware 7
• Zywall Atp800 Firmware 7
• Nebula Fwa515 Firmware 6
• Nebula Nr5101 Firmware 6
• P-660hw 6
• Pmg5617-t20b2 Firmware 6
• Usg1100 Firmware 6
• Usg110 Firmware 6
• Usg1900 Firmware 6
• Usg2200 Firmware 6
• Usg Flex Firmware 6
• Vmg3927-b50b Firmware 6
• Lte5388-m804 Firmware 5
• Lte5398-m904 Firmware 5
• Multiple Firewalls 5
• Nas540 Firmware 5
• Nbg-418n V2 Firmware 5
• Nr7101 Firmware 5
• Nwa50ax Firmware 5
• Nwa50ax-pro Firmware 5
• Nwa90ax-pro Firmware 5
• P660hn-t1a V1 Firmware 5
• P660hn-t1a V2 Firmware 5
• Pm5100-t1 Firmware 5
• Pmg5318-b20a Firmware 5
• Scr 50axe Firmware 5
• Scr50axe Firmware 5
• Uos 5
• Usg 1100 Firmware 5
• Usg 110 Firmware 5
• Usg 1900 Firmware 5
• Usg200 Firmware 5
• Usg20 Firmware 5

Newest

• zyxel nwa110ax firmware A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through... CVE-2026-76955 8.8 HighNovember 3, 2026
• zyxel gs1900-24e firmware, gs1900-10hp firmware, gs1900-16 firmware +7 more +9 more An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions... CVE-2026-107441 Public exploit 8.8 HighNovember 3, 2026
• zyxel ex3501-t0 firmware An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0... CVE-2026-12489 6.5 MediumOctober 20, 2026
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +1 more +3 more A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel... CVE-2026-14818 7.2 HighAugust 4, 2026
• zyxel wax650s firmware An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S... CVE-2026-8508 Public exploit 6.5 MediumAugust 4, 2026
• zyxel wax650s firmware A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel... CVE-2026-6837 Public exploit 7.2 HighAugust 4, 2026
• zyxel ax7501-b1 firmware A post-authentication command injection vulnerability in the "LogServer" field of the syslog... CVE-2026-6952 7.2 HighJuly 21, 2026
• zyxel gs1900-48hpv2 firmware, gs1900 series switches, gs1900-10hp firmware +8 more +10 more A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware... CVE-2026-7273 In KEV 8.8 HighJune 16, 2026
• zyxel vmg4005-b50b firmware A buffer overflow vulnerability in the UPnP DeletePortMapping() command in Zyxel VMG4005-B50B... CVE-2026-3871 6.5 MediumJune 2, 2026
• zyxel vmg4005-b50b firmware A buffer overflow vulnerability in the UPnP AddPortMapping() command in Zyxel VMG4005-B50B... CVE-2026-3870 6.5 MediumJune 2, 2026
• zyxel gs1200-10v3 firmware, gs1200-5hpv3 firmware, gs1200-5v3 firmware +2 more +4 more A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00(ACPS.2... CVE-2026-4795 6.5 MediumMay 26, 2026
• zyxel nwa1100-n firmware ** UNSUPPORTED WHEN ASSIGNED ** A buffer overflow vulnerability in the formWep(), formWlAc(),... CVE-2026-7287 7.5 HighMay 12, 2026
• zyxel wre6505 v2 firmware, wre6505 firmware +1 more ** UNSUPPORTED WHEN ASSIGNED ** An insecure storage of sensitive information vulnerability in the... CVE-2026-7257 4.4 MediumMay 12, 2026
• zyxel wre6505 v2 firmware, wre6505 firmware +1 more ** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel... CVE-2026-7256 8.8 HighMay 12, 2026
• zyxel wre6505 v2 firmware, wre6505 firmware +1 more ** UNSUPPORTED WHEN ASSIGNED ** An improper restriction of excessive authentication attempts... CVE-2026-7255 6.5 MediumMay 12, 2026
• zyxel ex3301-t0 firmware, am7510-00 firmware, ax7501-b1 firmware +42 more +44 more A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP... CVE-2026-1460 7.2 HighApril 28, 2026
• zyxel dx3300-t0 firmware, ax7501-b0 firmware, ax7501-b1 firmware +33 more +35 more A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel... CVE-2026-0711 6.8 MediumApril 28, 2026
• zyxel wre6505 v2 firmware, wre6505 firmware +1 more ** UNSUPPORTED WHEN ASSIGNED ** An improper encoding or escaping vulnerability in the CGI program... CVE-2026-6058 4.5 MediumApril 21, 2026
• zyxel vmg3625-t50b firmware, dx5401-b1 firmware, emg3525-t50b firmware +3 more +5 more A post-authentication command injection vulnerability in the TR-369 certificate download CGI... CVE-2026-1459 Public exploit 7.2 HighFebruary 24, 2026
• zyxel ex3301-t0 firmware, am7510-00 firmware, ax7501-b1 firmware +49 more +51 more A post-authentication command injection vulnerability in the log file download function of the... CVE-2025-13943 8.8 HighFebruary 24, 2026
• zyxel ex3510-b0 firmware, dx4510-b0 firmware, dx4510-b1 firmware +15 more +17 more A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions... CVE-2025-13942 9.8 CriticalFebruary 24, 2026
• zyxel vmg3625-t50b firmware, wx3100-t0 firmware, ax7501-b1 firmware +45 more +47 more A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B... CVE-2025-11848 4.9 MediumFebruary 24, 2026
• zyxel vmg3625-t50b firmware, wx3100-t0 firmware, ax7501-b1 firmware +51 more +53 more A null pointer dereference vulnerability in the IP settings CGI program of the Zyxel VMG3625-T50B... CVE-2025-11847 4.9 MediumFebruary 24, 2026
• zyxel vmg3625-t50b firmware, wx3100-t0 firmware, ax7501-b1 firmware +51 more +53 more A null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625... CVE-2025-11846 4.9 MediumFebruary 24, 2026
• zyxel vmg3625-t50b firmware, wx3100-t0 firmware, ax7501-b1 firmware +51 more +53 more A null pointer dereference vulnerability in the certificate downloader CGI program of the Zyxel... CVE-2025-11845 4.9 MediumFebruary 24, 2026
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +1 more +3 more A post‑authentication command injection vulnerability in the Dynamic DNS (DDNS) configuration CLI... CVE-2025-11730 7.2 HighFebruary 5, 2026
• zyxel dx3300-t0 firmware, ax7501-b0 firmware, ax7501-b1 firmware +51 more +53 more A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0... CVE-2025-8693 8.8 HighNovember 18, 2025
• zyxel dx3301-t0 firmware, ax7501-b0 firmware, ax7501-b1 firmware +63 more +65 more An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware... CVE-2025-6599 5.3 MediumNovember 18, 2025
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +2 more +4 more A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5... CVE-2025-9133 8.1 HighOctober 21, 2025
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +2 more +4 more A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from... CVE-2025-8078 7.2 HighOctober 21, 2025
• zyxel vmg8825-t50k firmware, emg3525-t50b firmware, emg5523-t50b firmware +21 more +23 more A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K... CVE-2025-7673 9.8 CriticalJuly 16, 2025
• zyxel nwa50ax pro firmware, nwa110ax firmware, nwa1123ac pro firmware +20 more +22 more A path traversal vulnerability in the file_upload-cgi CGI program of Zyxel NWA50AX PRO firmware... CVE-2025-6265 7.2 HighJuly 15, 2025
• zyxel amg1302-t10b firmware **UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability in the web management interface of... CVE-2025-3577 EPSS 12.6% 4.9 MediumApril 22, 2025
• zyxel uos, usg flex h series uos firmware +1 more An improper privilege management vulnerability in the recovery function of the USG FLEX H series... CVE-2025-1732 6.7 MediumApril 22, 2025
• zyxel uos, usg flex h series uos firmware +1 more An incorrect permission assignment vulnerability in the PostgreSQL commands of the USG FLEX H... CVE-2025-1731 Public exploit 7.8 HighApril 22, 2025
• zyxel ax7501-b1 firmware, ax7501-b0 firmware, dx3300-t0 firmware +38 more +40 more A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the... CVE-2024-12010 7.2 HighMarch 11, 2025
• zyxel ex5601-t1 firmware, ax7501-b0 firmware, ax7501-b1 firmware +35 more +37 more A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601... CVE-2024-12009 7.2 HighMarch 11, 2025
• zyxel vmg8825-t50k firmware, dm4200-b0 firmware, emg5723-t50k firmware +3 more +5 more A post-authentication command injection vulnerability in the "DNSServer” parameter of the... CVE-2024-11253 7.2 HighMarch 11, 2025
• zyxel vmg4325-b10a firmware, sbg3300-n000 firmware, sbg3300-nb00 firmware +11 more +13 more **UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy... CVE-2025-0890 Public exploit EPSS 14.4% 9.8 CriticalFebruary 4, 2025
• zyxel vmg4325-b10a firmware, dsl cpe devices, sbg3300-n000 firmware +12 more +14 more **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the... CVE-2024-40891 In KEVPublic exploit EPSS 22.9% 8.8 HighFebruary 4, 2025
• zyxel vmg4325-b10a firmware, dsl cpe devices, sbg3300-n000 firmware +12 more +14 more **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI... CVE-2024-40890 In KEV EPSS 20.7% 8.8 HighFebruary 4, 2025
• zyxel wbe530 firmware, wbe660s firmware, nwa110ax firmware +20 more +22 more An improper privilege management vulnerability in the web management interface of the Zyxel... CVE-2024-12398 8.8 HighJanuary 14, 2025
• zyxel vmg4005-b50a firmware, emg6726-b10a firmware, vmg3927-b50b firmware +3 more +5 more A post-authentication command injection vulnerability in the "host" parameter of the diagnostic... CVE-2024-9200 7.2 HighDecember 3, 2024
• zyxel vmg3625-t50b firmware, ax7501-b0 firmware, ax7501-b1 firmware +33 more +35 more A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program... CVE-2024-9197 4.9 MediumDecember 3, 2024
• zyxel vmg8825-t50k firmware, ax7501-b0 firmware, ax7501-b1 firmware +61 more +63 more A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in... CVE-2024-8748 7.5 HighDecember 3, 2024
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +7 more +9 more A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware... CVE-2024-11667 In KEV 7.5 HighNovember 27, 2024
• zyxel p-6101c firmware, p6101c firmware, p610c firmware +2 more **UNSUPPORTED WHEN ASSIGNED** The improper authentication vulnerability in the Zyxel P-6101C ADSL... CVE-2024-11494 7.5 HighNovember 20, 2024
• zyxel gs1900-10hp firmware, gs1900-16 firmware, gs1900-24 firmware +7 more +9 more A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version... CVE-2024-8882 4.5 MediumNovember 12, 2024
• zyxel gs1900-10hp firmware, gs1900-16 firmware, gs1900-24 firmware +7 more +9 more A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48... CVE-2024-8881 6.8 MediumNovember 12, 2024
• zyxel uos, usg flex h series uos firmware, usg flex 700h firmware +2 more The insufficiently protected credentials vulnerability in the CLI command of the USG FLEX H... CVE-2024-9677 5.5 MediumOctober 22, 2024
• Show olderLoading…