Skip to content

Zyxel Usg Flex 50(w) Series Firmware vulnerabilities

zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +1 more +3 moreA path traversal vulnerability in the CLI command used to execute configuration files in Zyxel...CVE-2026-148187.2 HighAugust 4, 2026
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +1 more +3 moreA post‑authentication command injection vulnerability in the Dynamic DNS (DDNS) configuration CLI...CVE-2025-117307.2 HighFebruary 5, 2026
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +2 more +4 moreA missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5...CVE-2025-91338.1 HighOctober 21, 2025
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +2 more +4 moreA post-authentication command injection vulnerability in Zyxel ATP series firmware versions from...CVE-2025-80787.2 HighOctober 21, 2025
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +7 more +9 moreA directory traversal vulnerability in the web management interface of Zyxel ATP series firmware...CVE-2024-11667In KEV7.5 HighNovember 27, 2024
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +2 more +4 moreA reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of...CVE-2024-420616.1 MediumSeptember 3, 2024
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +5 more +7 moreA post-authentication command injection vulnerability in Zyxel ATP series firmware versions from...CVE-2024-420607.2 HighSeptember 3, 2024
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +5 more +7 moreA post-authentication command injection vulnerability in Zyxel ATP series firmware versions from...CVE-2024-420597.2 HighSeptember 3, 2024
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +5 more +7 moreA null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through...CVE-2024-420587.5 HighSeptember 3, 2024
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +5 more +7 moreA command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions...CVE-2024-420578.1 HighSeptember 3, 2024
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +2 more +4 moreA buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4...CVE-2024-63434.9 MediumSeptember 3, 2024
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +25 more +27 moreA format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP...CVE-2023-67648.1 HighFebruary 20, 2024
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex h series firmware +24 more +26 moreA format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch...CVE-2023-63995.7 MediumFebruary 20, 2024
zyxel atp series firmware, nwa50ax firmware, usg flex 50(w) series firmware +45 more +47 moreA post-authentication command injection vulnerability in the file upload binary in Zyxel ATP...CVE-2023-63987.2 HighFebruary 20, 2024
zyxel atp series firmware, nwa50ax firmware, usg flex 50(w) series firmware +23 more +25 moreAn improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series...CVE-2023-57975.5 MediumNovember 28, 2023
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +3 more +5 moreAn improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware...CVE-2023-56505.5 MediumNovember 28, 2023
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +8 more +10 moreAn integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the...CVE-2023-43987.5 HighNovember 28, 2023
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +2 more +4 moreA buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series...CVE-2023-43974.4 MediumNovember 28, 2023
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +3 more +5 moreA buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG...CVE-2023-379265.5 MediumNovember 28, 2023
zyxel atp series firmware, nwa50ax firmware, usg flex 50(w) series firmware +23 more +25 moreAn improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series...CVE-2023-379255.5 MediumNovember 28, 2023
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +3 more +5 moreA cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware...CVE-2023-351395.2 MediumNovember 28, 2023
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +3 more +5 moreAn improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series...CVE-2023-351365.5 MediumNovember 28, 2023
zyxel atp, atp series firmware, nxc2500 firmware +30 more +32 moreA command injection vulnerability in the access point (AP) management feature of the Zyxel ATP...CVE-2023-341418.0 HighJuly 17, 2023
zyxel atp series firmware, nxc2500 firmware, nxc5500 firmware +26 more +28 moreA buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch...CVE-2023-341406.5 MediumJuly 17, 2023
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +28 more +30 moreA command injection vulnerability in the hotspot management feature of the Zyxel ATP series...CVE-2023-341388.0 HighJuly 17, 2023
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +24 more +26 moreA command injection vulnerability in the configuration parser of the Zyxel ATP series firmware...CVE-2023-33012Public exploit8.8 HighJuly 17, 2023
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +27 more +29 moreA format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2...CVE-2023-330118.8 HighJuly 17, 2023
zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +25 more +27 moreThe configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware...CVE-2023-287678.8 HighJuly 17, 2023