Zyxel vulnerabilities

CVEs per yearBy the year they were published

1. 20171
2. 20181
3. 20201
4. 202213
5. 202355
6. 202328
7. 202437
8. 202619
9. 202617

Known exploitedNewest addition to KEV first

• CVE-2026-7273

  A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based,…

  Zyxel · GS1900-48HPv2 firmware

  ExploitedHigh8.8
• CVE-2024-40891

  **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A…

  Zyxel · VMG4325-B10A firmware

  ExploitedHigh8.8
• CVE-2024-40890

  **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware…

  Zyxel · VMG4325-B10A firmware

  ExploitedHigh8.8
• CVE-2024-11667

  A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware…

  Zyxel · ATP series firmware

  ExploitedHigh7.5
• CVE-2023-27992

  The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to…

  Zyxel · NAS326 firmware

  ExploitedCritical9.8
• CVE-2023-33010

  A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware…

  Zyxel · ATP series firmware

  ExploitedCritical9.8
• CVE-2023-33009

  A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions…

  Zyxel · ATP series firmware

  ExploitedCritical9.8
• CVE-2023-28771

  Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series…

  Zyxel · ZyWALL/USG series firmware

  ExploitedCritical9.8
• CVE-2022-30525

  A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions…

  Zyxel · USG FLEX 100(W) firmware

  ExploitedCritical9.8
• CVE-2020-9054

  ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi

  ZyXEL · NAS326

  ExploitedCritical9.8

Newest CVEs

• CVE-2026-76955

  A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could allow a LAN-based attacker to escalate…

  Zyxel · NWA110AX firmware

  High8.8
• CVE-2026-107441

  An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an unauthenticated adjacent…

  Zyxel · GS1900-24E firmware

  High8.8
• CVE-2026-12489

  An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0 could allow an…

  Zyxel · EX3501-T0 firmware

  Medium6.5
• CVE-2026-14818

  A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1,…

  Zyxel · ATP series firmware

  High7.2
• CVE-2026-8508

  An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an…

  Zyxel · WAX650S firmware

  Medium6.5
• CVE-2026-6837

  A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an…

  Zyxel · WAX650S firmware

  High7.2
• CVE-2026-6952

  A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-B1 firmware versions through…

  Zyxel · AX7501-B1 firmware

  High7.2
• CVE-2026-7273

  A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based,…

  Zyxel · GS1900-48HPv2 firmware

  ExploitedHigh8.8
• CVE-2026-3871

  A buffer overflow vulnerability in the UPnP DeletePortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 could allow an…

  Zyxel · VMG4005-B50B firmware

  Medium6.5
• CVE-2026-3870

  A buffer overflow vulnerability in the UPnP AddPortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 could allow an adjacent…

  Zyxel · VMG4005-B50B firmware

  Medium6.5