Vmg8623-t50b Firmware vulnerabilities | LiveThreat CVE Feed

Product

Vmg8623-t50b Firmware

by Zyxel · last CVE Apr 28, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities28 In the news0 Timeline

Severity mix

Critical 1High 11Medium 16Low 0

Severity

All severities28 Critical1 High11 Medium16 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Vmg8623-t50b Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-7673	9.8	1%	Jul 16	A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unauthenticated attacker… Affected: before 5.50\(abpm.4\)c0
CVE-2025-13943	8.8	2%	Feb 24	A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50(ABVY.7)C0 could allow an… Affected: before 5.50\(abpm.9.7\)c0
CVE-2025-8693	8.8	1%	Nov 18	A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated… Affected: through 5.50\(abpm.9.5\)c0
CVE-2022-43390	8.8	1%	Jan 11	A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on… Affected: All versions, or not specified
CVE-2022-26413	8.0	1%	Apr 11	A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated attacker to execute arbitrary OS… Affected: before 5.50\(abpm.6\)c0
CVE-2025-6599	7.5	0%	Nov 18	An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform… Affected: through 5.50\(abpm.9.5\)c0
CVE-2024-8748	7.5	1%	Dec 3	A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an… Affected: before 5.50\(abpm.9.3\)c0
CVE-2024-5412	7.5	1%	Sep 3	A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenticated attacker to cause denial of… Affected: before 5.50\(abpm.9.2\)c0
CVE-2026-1460	7.2	1%	Apr 28	A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through… Affected: before 5.50\(abpm.9.8\)c0
CVE-2026-1459	7.2	1%	Feb 24	A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.7)C0 could… Affected: through 5.50\(abpm.9.7\)c0
CVE-2024-12010	7.2	1%	Mar 11	A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17(ABPC.5.3)C0 and earlier could allow an… Affected: through 5.50\(abpm.9.3\)c0
CVE-2024-12009	7.2	1%	Mar 11	A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70(ACDZ.3.6)C0 and earlier could allow an authenticated… Affected: through 5.50\(abpm.9.3\)c0
CVE-2026-0711	6.8	1%	Apr 28	A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated,… Affected: before 5.50\(abpm.9.8\)c0
CVE-2023-37929	6.5	1%	May 21	The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow an authenticated remote attacker to cause denial of service… Affected: 5.50(abpm.8)c0
CVE-2022-43392	6.5	1%	Jan 11	A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause… Affected: All versions, or not specified
CVE-2022-43391	6.5	1%	Jan 11	A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause… Affected: All versions, or not specified
CVE-2021-35036	6.5	0%	Mar 1	A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information… Affected: before 5.50\(abpm.7\)c0
CVE-2024-0816	5.5	0%	May 21	The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denial of service (DoS) conditions by… Affected: 5.50(abpm.8)c0
CVE-2022-26414	5.5	0%	Apr 11	A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, which could be exploited by a local… Affected: before 5.50\(abpm.6\)c0
CVE-2025-11848	4.9	2%	Feb 24	A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware… Affected: before 5.50\(abpm.9.7\)c0
CVE-2025-11847	4.9	2%	Feb 24	A null pointer dereference vulnerability in the IP settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware… Affected: before 5.50\(abpm.9.7\)c0
CVE-2025-11846	4.9	1%	Feb 24	A null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware… Affected: before 5.50\(abpm.9.7\)c0
CVE-2025-11845	4.9	1%	Feb 24	A null pointer dereference vulnerability in the certificate downloader CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0… Affected: before 5.50\(abpm.9.7\)c0
CVE-2024-9197	4.9	1%	Dec 3	A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an… Affected: before 5.50\(abpm.9.3\)c0
CVE-2024-38269	4.9	0%	Sep 24	An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could… Affected: before 5.50\(abpm.9.2\)c0
CVE-2024-38268	4.9	0%	Sep 24	An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow… Affected: before 5.50\(abpm.9.2\)c0
CVE-2024-38267	4.9	0%	Sep 24	An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could… Affected: before 5.50\(abpm.9.2\)c0
CVE-2024-38266	4.9	0%	Sep 24	An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could… Affected: before 5.50\(abpm.9\)c0