Zyxel Zld vulnerabilities

• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +2 more +4 more A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5... CVE-2025-9133 8.1 HighOctober 21, 2025
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +2 more +4 more A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from... CVE-2025-8078 7.2 HighOctober 21, 2025
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +7 more +9 more A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware... CVE-2024-11667 In KEV 7.5 HighNovember 27, 2024
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +2 more +4 more A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of... CVE-2024-42061 6.1 MediumSeptember 3, 2024
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +5 more +7 more A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from... CVE-2024-42060 7.2 HighSeptember 3, 2024
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +5 more +7 more A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from... CVE-2024-42059 7.2 HighSeptember 3, 2024
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +5 more +7 more A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through... CVE-2024-42058 7.5 HighSeptember 3, 2024
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +5 more +7 more A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions... CVE-2024-42057 8.1 HighSeptember 3, 2024
• zyxel atp series firmware, usg flex series firmware, atp800 firmware +2 more +4 more A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from... CVE-2024-7203 7.2 HighSeptember 3, 2024
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +2 more +4 more A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4... CVE-2024-6343 4.9 MediumSeptember 3, 2024
• zyxel usg flex series firmware, vpn series firmware, zld +2 more An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX... CVE-2023-5960 5.5 MediumNovember 28, 2023
• zyxel atp series firmware, nwa50ax firmware, usg flex 50(w) series firmware +23 more +25 more An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series... CVE-2023-5797 5.5 MediumNovember 28, 2023
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +3 more +5 more An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware... CVE-2023-5650 5.5 MediumNovember 28, 2023
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +8 more +10 more An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the... CVE-2023-4398 7.5 HighNovember 28, 2023
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +2 more +4 more A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series... CVE-2023-4397 4.4 MediumNovember 28, 2023
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +3 more +5 more A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG... CVE-2023-37926 5.5 MediumNovember 28, 2023
• zyxel atp series firmware, nwa50ax firmware, usg flex 50(w) series firmware +23 more +25 more An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series... CVE-2023-37925 5.5 MediumNovember 28, 2023
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +3 more +5 more A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware... CVE-2023-35139 5.2 MediumNovember 28, 2023
• zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +3 more +5 more An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series... CVE-2023-35136 5.5 MediumNovember 28, 2023
• zyxel vpn orchestrator, zld, nsg firmware +1 more +3 more Certain Zyxel products allow command injection by an admin via an input string to chg_exp_pwd... CVE-2020-29299 7.2 HighDecember 27, 2020
• zyxel access points firmware, zld +1 more A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways... CVE-2020-25014 9.8 CriticalNovember 27, 2020