UF
Product
USG FLEX series firmware
by Zyxel · last CVE Aug 4, 2026
On CISA KEVExploited in the wildRansomware-linked
15
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 9Medium 2Low 0
Watch

Add USG FLEX series firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-11667
RansomwareIn wildKEV
9.8
3%
Nov 27
Zyxel Multiple Firewalls Path Traversal Vulnerability
Affected: versions V5.00 through V5.38
CVE-2023-33009
In wildKEV
9.8
28%
May 24
Zyxel Multiple Firewalls Buffer Overflow Vulnerability
Affected: 4.60 through 5.36 Patch 1
CVE-2023-33010
In wildKEV
9.8
29%
May 24
Zyxel Multiple Firewalls Buffer Overflow Vulnerability
Affected: 4.50 through 5.36 Patch 1
CVE-2023-28771
In wildKEV
9.8
99%
Apr 25
Zyxel Multiple Firewalls OS Command Injection Vulnerability
Affected: 4.60 through 5.35
Showing 4