Vulnerability index

Browse CVEs

275 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wre6505 Firmware HIGH 8.8
CVE-2026-7256

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow…

Mitigation only
Fix from $1,950 2026-05-12
Nwa1100 N Firmware HIGH 7.5
CVE-2026-7287

** UNSUPPORTED WHEN ASSIGNED ** A buffer overflow vulnerability in the formWep(), formWlAc(), formPasswordSetup(), formUpgradeCert(), and formDelcert…

Mitigation only
Fix from $1,950 2026-05-12
Wre6505 Firmware MEDIUM 6.5
CVE-2026-7255

** UNSUPPORTED WHEN ASSIGNED ** An improper restriction of excessive authentication attempts vulnerability in the web management interface of Zyxel W…

Mitigation only
Fix from $1,600 2026-05-12
Nebula Fwa70 Firmware HIGH 7.2
CVE-2026-1460

A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 f…

Fix: 1.15 / 1.16+
Fix from $1,950 2026-04-28
Nr5307 Firmware MEDIUM 6.8
CVE-2026-0711

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 coul…

Fix: 1.60 / 2.00+
Fix from $1,600 2026-04-28
Wre6505 Firmware MEDIUM 5.7
CVE-2026-6058

** UNSUPPORTED WHEN ASSIGNED ** An improper encoding or escaping vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C…

Mitigation only
Fix from $1,600 2026-04-21
Wx5610 B0 Firmware CRITICAL 9.8
CVE-2025-13942

A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attack…

Fix: 1.00 / 1.16+
Fix from $2,300 2026-02-24
Ex5601 T1 Firmware HIGH 8.8
CVE-2025-13943

A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50(ABVY.7)…

Fix: 5.17 / 5.18+
Fix from $1,950 2026-02-24
Vmg3625 T50c Firmware HIGH 7.2
CVE-2026-1459

A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions thro…

Fix: after 5.50
Fix from $1,950 2026-02-24
Dm4200 B0 Firmware HIGH 8.8
CVE-2025-8693

A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could …

Fix: after 5.63
Fix from $1,950 2025-11-18
Lte3301 Plus Firmware HIGH 7.5
CVE-2025-6599

An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an …

Fix: after 5.00
Fix from $1,950 2025-11-18
Zld HIGH 8.1
CVE-2025-9133EPSS 5%

A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 th…

Fix: 5.41+
Fix from $1,950 2025-10-21
Zld HIGH 7.2
CVE-2025-8078

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versio…

Fix: 5.41+
Fix from $1,950 2025-10-21
Emg3525 T50b Firmware CRITICAL 9.8
CVE-2025-7673

A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could all…

Fix: 5.13 / 5.15+
Fix from $2,300 2025-07-16
Nwa50ax Firmware HIGH 7.2
CVE-2025-6265

A path traversal vulnerability in the file_upload-cgi CGI program of Zyxel NWA50AX PRO firmware version 7.10(ACGE.2) and earlier could allow an authe…

Fix: after 7.10
Fix from $1,950 2025-07-15
Uos HIGH 7.8
CVE-2025-1731

An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware versions from V1.20 through V…

Fix: 1.32+
Fix from $1,950 2025-04-22
Uos MEDIUM 6.7
CVE-2025-1732

An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS firmware version V1.31 and earlier could a…

Mitigation only
Fix from $1,600 2025-04-22
Emg5723 T50k Firmware HIGH 7.2
CVE-2024-11253

A post-authentication command injection vulnerability in the "DNSServer” parameter of the diagnostic function in the Zyxel VMG8825-T50K firmware vers…

Fix: after 5.50
Fix from $1,950 2025-03-11
Dx3300 T0 Firmware HIGH 7.2
CVE-2024-12009

A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70(ACDZ.3.6)C0 and earlier co…

Fix: after 5.50
Fix from $1,950 2025-03-11
Wx5610 B0 Firmware HIGH 7.2
CVE-2024-12010

A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17(ABPC.5.3)C0 and …

Fix: after 5.50
Fix from $1,950 2025-03-11
Vmg4325 B10a Firmware CRITICAL 9.8
CVE-2025-0890EPSS 14%

**UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAF…

Mitigation only
Fix from $2,300 2025-02-04
Vmg1312 B10a Firmware HIGH 8.8
CVE-2024-40890 KEVEPSS 22%

**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmw…

Mitigation only
Fix from $1,950 2025-02-04
Vmg1312 B10a Firmware HIGH 8.8
CVE-2024-40891 KEVEPSS 22%

**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B1…

Mitigation only
Fix from $1,950 2025-02-04
Nwa50ax Firmware HIGH 8.8
CVE-2024-12398

An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S…

Fix: 7.10+
Fix from $1,950 2025-01-14
Lte3301 Plus Firmware HIGH 7.5
CVE-2024-8748

A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABO…

Fix: 1.00 / 1.16+
Fix from $1,950 2024-12-03
Emg6726 B10a Firmware HIGH 7.2
CVE-2024-9200

A post-authentication command injection vulnerability in the "host" parameter of the diagnostic function in Zyxel VMG4005-B50A firmware versions thro…

Fix: 5.13 / 5.15+
Fix from $1,950 2024-12-03
Zld CRITICAL 9.8
CVE-2024-11667 KEV

A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmwa…

Fix: after 5.38
Fix from $2,300 2024-11-27
P6101c Firmware HIGH 7.5
CVE-2024-11494

**UNSUPPORTED WHEN ASSIGNED** The improper authentication vulnerability in the Zyxel P-6101C ADSL modem firmware version P-6101CSA6AP_20140331 could …

No fix yet
Fix from $1,950 2024-11-20
Gs1900 8 Firmware MEDIUM 6.8
CVE-2024-8881

A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier c…

Fix: 2.90+
Fix from $1,600 2024-11-12
Uos HIGH 7.8
CVE-2024-9677

The insufficiently protected credentials vulnerability in the CLI command of the USG FLEX H series uOS firmware version V1.21 and earlier versions co…

Fix: 1.30+
Fix from $1,950 2024-10-22