Skip to contentZyxel Vpn Series Firmware vulnerabilities
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +1 more +3 moreA path traversal vulnerability in the CLI command used to execute configuration files in Zyxel...CVE-2026-148187.2 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +1 more +3 moreA post‑authentication command injection vulnerability in the Dynamic DNS (DDNS) configuration CLI...CVE-2025-117307.2 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +2 more +4 moreA missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5...CVE-2025-91338.1 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +2 more +4 moreA post-authentication command injection vulnerability in Zyxel ATP series firmware versions from...CVE-2025-80787.2 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +7 more +9 moreA directory traversal vulnerability in the web management interface of Zyxel ATP series firmware...CVE-2024-11667In KEV7.5 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +2 more +4 moreA reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of...CVE-2024-420616.1 Medium
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +5 more +7 moreA post-authentication command injection vulnerability in Zyxel ATP series firmware versions from...CVE-2024-420607.2 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +5 more +7 moreA post-authentication command injection vulnerability in Zyxel ATP series firmware versions from...CVE-2024-420597.2 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +5 more +7 moreA null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through...CVE-2024-420587.5 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +5 more +7 moreA command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions...CVE-2024-420578.1 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +2 more +4 moreA buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4...CVE-2024-63434.9 Medium
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +25 more +27 moreA format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP...CVE-2023-67648.1 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex h series firmware +24 more +26 moreA format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch...CVE-2023-63995.7 Medium
- zyxel atp series firmware, nwa50ax firmware, usg flex 50(w) series firmware +45 more +47 moreA post-authentication command injection vulnerability in the file upload binary in Zyxel ATP...CVE-2023-63987.2 High
- zyxel usg flex series firmware, vpn series firmware, zld +2 moreAn improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX...CVE-2023-59605.5 Medium
- zyxel atp series firmware, nwa50ax firmware, usg flex 50(w) series firmware +23 more +25 moreAn improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series...CVE-2023-57975.5 Medium
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +3 more +5 moreAn improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware...CVE-2023-56505.5 Medium
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +8 more +10 moreAn integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the...CVE-2023-43987.5 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +2 more +4 moreA buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series...CVE-2023-43974.4 Medium
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +3 more +5 moreA buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG...CVE-2023-379265.5 Medium
- zyxel atp series firmware, nwa50ax firmware, usg flex 50(w) series firmware +23 more +25 moreAn improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series...CVE-2023-379255.5 Medium
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +3 more +5 moreA cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware...CVE-2023-351395.2 Medium
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +3 more +5 moreAn improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series...CVE-2023-351365.5 Medium
- zyxel atp, atp series firmware, nxc2500 firmware +30 more +32 moreA command injection vulnerability in the access point (AP) management feature of the Zyxel ATP...CVE-2023-341418.0 High
- zyxel atp series firmware, nxc2500 firmware, nxc5500 firmware +26 more +28 moreA buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch...CVE-2023-341406.5 Medium
- zyxel usg flex series firmware, vpn series firmware, usg 2200-vpn firmware +16 more +18 moreA command injection vulnerability in the Free Time WiFi hotspot feature of in the Zyxel USG FLEX...CVE-2023-341398.8 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +28 more +30 moreA command injection vulnerability in the hotspot management feature of the Zyxel ATP series...CVE-2023-341388.0 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +24 more +26 moreA command injection vulnerability in the configuration parser of the Zyxel ATP series firmware...CVE-2023-33012Public exploit8.8 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +27 more +29 moreA format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2...CVE-2023-330118.8 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +25 more +27 moreThe configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware...CVE-2023-287678.8 High
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +27 more +29 moreA buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware...CVE-2023-33010In KEVEPSS 29.0%9.8 Critical
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +27 more +29 moreA buffer overflow vulnerability in the notification function in Zyxel ATP series firmware...CVE-2023-33009In KEVEPSS 28.1%9.8 Critical
- zyxel atp series firmware, usg flex series firmware, vpn series firmware +21 more +23 moreImproper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73,...CVE-2023-28771In KEVPublic exploitEPSS 99.3%9.8 Critical
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +21 more +23 moreThe post-authentication command injection vulnerability in the CLI command of Zyxel ATP series...CVE-2023-279918.8 High
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +21 more +23 moreThe XSS vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series...CVE-2023-279904.8 Medium
- zyxel atp series firmware, nwa110ax firmware, usg flex 50(w) firmware +53 more +55 moreA post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series...CVE-2023-229186.5 Medium
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +20 more +22 moreA buffer overflow vulnerability in the “sdwan_iface_ipc” binary of Zyxel ATP series firmware...CVE-2023-229177.5 High
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +20 more +22 moreThe configuration parser of Zyxel ATP series firmware versions 5.10 through 5.35, USG FLEX series...CVE-2023-229168.1 High
- zyxel usg flex 50(w) firmware, usg flex series firmware, usg20(w)-vpn firmware +13 more +15 moreA buffer overflow vulnerability in the “fbwifi_forward.cgi” CGI program of Zyxel USG FLEX series...CVE-2023-229157.5 High
- zyxel usg flex series firmware, vpn series firmware, usg flex 100 firmware +10 more +12 moreA path traversal vulnerability in the “account_print.cgi” CGI program of Zyxel USG FLEX series...CVE-2023-229147.2 High
- zyxel usg flex series firmware, vpn series firmware, usg flex 100 firmware +10 more +12 moreA post-authentication command injection vulnerability in the “account_operator.cgi” CGI program...CVE-2023-229138.1 High
- zyxel atp series firmware, usg flex series firmware, vpn series firmware +26 more +28 moreA post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG...CVE-2022-385477.2 High
- zyxel atp series firmware, usg flex series firmware, vpn series firmware +20 more +22 moreA cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware...CVE-2022-406034.7 Medium
- zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +28 more +30 moreA directory traversal vulnerability caused by specific character sequences within an improperly...CVE-2022-20306.5 Medium
- zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +28 more +30 moreA privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W)...CVE-2022-30526Public exploit7.8 High
- zyxel atp series firmware, nap203 firmware, nsg series firmware +67 more +69 moreA argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series...CVE-2022-265327.8 High
- zyxel atp series firmware, usg flex series firmware, usg/zywall series firmware +33 more +35 moreA downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI...CVE-2022-09106.5 Medium
- zyxel atp series firmware, usg flex series firmware, usg/zywall series firmware +33 more +35 moreA cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series...CVE-2022-07345.8 Medium
- zyxel atp series firmware, nap203 firmware, nsg series firmware +67 more +69 moreMultiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL...CVE-2022-265316.1 Medium
- zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +19 more +21 moreA OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware...CVE-2022-30525In KEVPublic exploitEPSS 99.9%9.8 Critical
- Show moreLoading…