Login Request a demo
ZY
Vendor
Zyxel
498 products with CVEs on record
3,083
CVEs
237
On KEV
1
New 30D
Products
AF
Atp100 Firmware
Zyxel
9.8
30 CVEs7 on KEV0 new
EF
EX3501-T0 firmware
Zyxel
8.8
21 CVEs0 on KEV1 new
AF
Atp200 Firmware
Zyxel
9.8
25 CVEs6 on KEV0 new
AF
Atp500 Firmware
Zyxel
9.8
25 CVEs6 on KEV0 new
AF
Atp800 Firmware
Zyxel
9.8
25 CVEs6 on KEV0 new
VF
Vpn100 Firmware
Zyxel
9.8
24 CVEs6 on KEV0 new
VF
Vpn300 Firmware
Zyxel
9.8
24 CVEs6 on KEV0 new
VF
Vpn50 Firmware
Zyxel
9.8
24 CVEs6 on KEV0 new
VF
Vpn1000 Firmware
Zyxel
9.8
23 CVEs6 on KEV0 new
UF
Usg Flex 100w Firmware
Zyxel
9.8
34 CVEs5 on KEV0 new
UF
USG FLEX 200 firmware
Zyxel
9.8
34 CVEs5 on KEV0 new
UF
USG FLEX 500 firmware
Zyxel
9.8
34 CVEs5 on KEV0 new
UF
USG FLEX 700 firmware
Zyxel
9.8
34 CVEs5 on KEV0 new
UF
Usg Flex 50w Firmware
Zyxel
9.8
27 CVEs5 on KEV0 new
AF
Atp100w Firmware
Zyxel
9.8
23 CVEs5 on KEV0 new
AF
Atp700 Firmware
Zyxel
9.8
23 CVEs5 on KEV0 new
UF
Usg20-vpn Firmware
Zyxel
9.8
16 CVEs5 on KEV0 new
AS
ATP series firmware
Zyxel
9.8
13 CVEs5 on KEV0 new
MF
Multiple Firewalls
Zyxel
9.8
5 CVEs5 on KEV0 new
UF
Usg Flex 100 Firmware
Zyxel
9.8
30 CVEs4 on KEV0 new
UF
USG FLEX series firmware
Zyxel
9.8
12 CVEs4 on KEV0 new
VS
VPN series firmware
Zyxel
9.8
4 CVEs4 on KEV0 new
UF
Usg Flex 50 Firmware
Zyxel
9.8
23 CVEs3 on KEV0 new
UF
Usg20w-vpn Firmware
Zyxel
9.8
15 CVEs3 on KEV0 new
UF
USG FLEX 50(W) firmware
Zyxel
9.8
3 CVEs3 on KEV0 new
ZS
ZyWALL/USG series firmware
Zyxel
9.8
3 CVEs3 on KEV0 new
NF
NAS326 firmware
Zyxel
9.8
24 CVEs2 on KEV0 new
U2
Usg 20w-vpn Firmware
Zyxel
9.8
19 CVEs2 on KEV0 new
NF
NAS542 firmware
Zyxel
9.8
18 CVEs2 on KEV0 new
UF
Usg210 Firmware
Zyxel
9.8
10 CVEs2 on KEV0 new
UF
Usg310 Firmware
Zyxel
9.8
10 CVEs2 on KEV0 new
UF
Usg40 Firmware
Zyxel
9.8
9 CVEs2 on KEV0 new
UF
Usg40w Firmware
Zyxel
9.8
9 CVEs2 on KEV0 new
UF
Usg60 Firmware
Zyxel
9.8
9 CVEs2 on KEV0 new
UF
Usg60w Firmware
Zyxel
9.8
9 CVEs2 on KEV0 new
U4
Usg 40 Firmware
Zyxel
9.8
7 CVEs2 on KEV0 new
U4
Usg 40w Firmware
Zyxel
9.8
7 CVEs2 on KEV0 new
U6
Usg 60 Firmware
Zyxel
9.8
7 CVEs2 on KEV0 new
U6
Usg 60w Firmware
Zyxel
9.8
7 CVEs2 on KEV0 new
UF
Usg110 Firmware
Zyxel
9.8
6 CVEs2 on KEV0 new
UF
Usg1100 Firmware
Zyxel
9.8
6 CVEs2 on KEV0 new
UF
Usg1900 Firmware
Zyxel
9.8
6 CVEs2 on KEV0 new
UF
Usg2200 Firmware
Zyxel
9.8
6 CVEs2 on KEV0 new
NF
NAS540 firmware
Zyxel
9.8
5 CVEs2 on KEV0 new
SF
Sbg3300-n000 Firmware
Zyxel
9.8
4 CVEs2 on KEV0 new
SF
Sbg3300-nb00 Firmware
Zyxel
9.8
4 CVEs2 on KEV0 new
SF
Sbg3500-n000 Firmware
Zyxel
9.8
4 CVEs2 on KEV0 new
VF
Vmg1312-b10a Firmware
Zyxel
9.8
4 CVEs2 on KEV0 new
VF
Vmg4380-b10a Firmware
Zyxel
9.8
4 CVEs2 on KEV0 new
VF
Vmg8324-b10a Firmware
Zyxel
9.8
4 CVEs2 on KEV0 new
VF
Vmg8924-b10a Firmware
Zyxel
9.8
4 CVEs2 on KEV0 new
SF
Sbg3500-nb00 Firmware
Zyxel
9.8
3 CVEs2 on KEV0 new
VF
Vmg1312-b10b Firmware
Zyxel
9.8
3 CVEs2 on KEV0 new
VF
Vmg1312-b10e Firmware
Zyxel
9.8
3 CVEs2 on KEV0 new
VF
Vmg3312-b10a Firmware
Zyxel
9.8
3 CVEs2 on KEV0 new
VF
Vmg3313-b10a Firmware
Zyxel
9.8
3 CVEs2 on KEV0 new
VF
Vmg3926-b10b Firmware
Zyxel
9.8
3 CVEs2 on KEV0 new
VF
VMG4325-B10A firmware
Zyxel
9.8
3 CVEs2 on KEV0 new
DC
DSL CPE Devices
Zyxel
8.8
2 CVEs2 on KEV0 new
MN
Multiple Network-Attached Storage (NAS) Devices
Zyxel
9.8
2 CVEs2 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-12489
EF
EX3501-T0 firmware
Zyxel
6.5
0%
Oct 20An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0 could allow an authenticated attacker to…
CVE-2026-14818
AS
ATP series firmware
Zyxel
7.2
1%
Aug 4A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series…
CVE-2026-8508
WF
WAX650S firmware
Zyxel
6.5
0%
Aug 4An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an attacker on the WLAN to…
CVE-2026-6837
WF
WAX650S firmware
Zyxel
7.2
2%
Aug 4A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an authenticated…
CVE-2026-6952
AF
AX7501-B1 firmware
Zyxel
7.2
2%
Jul 21A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-B1 firmware versions through 5.17(ABPC.7.2)C0 could allow an…
CVE-2026-7273
In wildKEV
GF
GS1900-10HP firmware
Zyxel
8.8
3%
Jun 16Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
CVE-2026-3871
VF
VMG4005-B50B firmware
Zyxel
6.5
0%
Jun 2A buffer overflow vulnerability in the UPnP DeletePortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 could allow an adjacent attacker to…
CVE-2026-3870
VF
VMG4005-B50B firmware
Zyxel
6.5
0%
Jun 2A buffer overflow vulnerability in the UPnP AddPortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 could allow an adjacent attacker to trigger a…
CVE-2026-4795
GF
GS1200-5v3 firmware
Zyxel
6.5
0%
May 26A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00(ACPS.2)C0, GS1200-8v3 firmware versions through 1.00(ACPT.2)C0,  GS1200-5HPv3 firmware…
CVE-2026-7287
NF
NWA1100-N firmware
Zyxel
7.5
0%
May 12** UNSUPPORTED WHEN ASSIGNED ** A buffer overflow vulnerability in the formWep(), formWlAc(), formPasswordSetup(), formUpgradeCert(), and formDelcert() functions of the “webs”…
CVE-2026-7257
WV
WRE6505 v2 firmware
Zyxel
4.4
0%
May 12** UNSUPPORTED WHEN ASSIGNED ** An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could…
CVE-2026-7256
WV
WRE6505 v2 firmware
Zyxel
8.8
1%
May 12** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the…
CVE-2026-7255
WV
WRE6505 v2 firmware
Zyxel
6.5
0%
May 12** UNSUPPORTED WHEN ASSIGNED ** An improper restriction of excessive authentication attempts vulnerability in the web management interface of Zyxel WRE6505 v2 firmware version…
CVE-2026-1460
DF
DX3301-T0 firmware
Zyxel
7.2
1%
Apr 28A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through…
CVE-2026-0711
DF
DX3300-T0 firmware
Zyxel
6.8
1%
Apr 28A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated,…
CVE-2026-6058
WF
Wre6505 Firmware
Zyxel
5.7
0%
Apr 21** UNSUPPORTED WHEN ASSIGNED ** An improper encoding or escaping vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent…
CVE-2026-1459
EF
Emg5523-t50b Firmware
Zyxel
7.2
1%
Feb 24A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.7)C0 could…
CVE-2025-13943
WF
Wx3401-b1 Firmware
Zyxel
8.8
2%
Feb 24A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50(ABVY.7)C0 could allow an…
CVE-2025-13942
LF
Lte3301-plus Firmware
Zyxel
9.8
1%
Feb 24A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating system…
CVE-2025-11848
EF
Ex5601-t0 Firmware
Zyxel
4.9
2%
Feb 24A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware…
CVE-2025-11847
LF
Lte3301-plus Firmware
Zyxel
4.9
2%
Feb 24A null pointer dereference vulnerability in the IP settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware…
CVE-2025-11846
NF
Nebula Fwa515 Firmware
Zyxel
4.9
1%
Feb 24A null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware…
CVE-2025-11845
EF
Ex3300-t1 Firmware
Zyxel
4.9
1%
Feb 24A null pointer dereference vulnerability in the certificate downloader CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0…
CVE-2025-8693
EF
Ex3300-t0 Firmware
Zyxel
8.8
1%
Nov 18A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated…
CVE-2025-6599
EF
Emg5523-t50b Firmware
Zyxel
7.5
0%
Nov 18An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform…
CVE-2025-9133
ZL
Zld
Zyxel
8.1
5%
Oct 21A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W)…
CVE-2025-8078
ZL
Zld
Zyxel
7.2
1%
Oct 21A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40,…
CVE-2025-7673
VF
Vmg8825-bx0b Firmware
Zyxel
9.8
1%
Jul 16A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unauthenticated attacker…
CVE-2025-6265
WF
Wax655e Firmware
Zyxel
7.2
1%
Jul 15A path traversal vulnerability in the file_upload-cgi CGI program of Zyxel NWA50AX PRO firmware version 7.10(ACGE.2) and earlier could allow an authenticated attacker with…
CVE-2025-3577
AF
Amg1302-t10b Firmware
Zyxel
4.9
13%
Apr 22**UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B firmware version 2.00(AAJC.16)C0 could allow an…
CVE-2025-1732
UO
Uos
Zyxel
6.7
0%
Apr 22An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS firmware version V1.31 and earlier could allow an authenticated local…
CVE-2025-1731
UO
Uos
Zyxel
7.8
1%
Apr 22An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware versions from V1.20 through V1.31 could allow an…
CVE-2024-12010
EF
Ex3300-t0 Firmware
Zyxel
7.2
1%
Mar 11A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17(ABPC.5.3)C0 and earlier could allow an…
CVE-2024-12009
VF
Vmg3927-t50k Firmware
Zyxel
7.2
1%
Mar 11A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70(ACDZ.3.6)C0 and earlier could allow an authenticated…
CVE-2024-11253
VF
Vmg8825-t50k Firmware
Zyxel
7.2
1%
Mar 11A post-authentication command injection vulnerability in the "DNSServer” parameter of the diagnostic function in the Zyxel VMG8825-T50K firmware version V5.50(ABOM.8.5)C0 and…
CVE-2025-0890
VF
Vmg8924-b10a Firmware
Zyxel
9.8
14%
Feb 4**UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an…
CVE-2024-40891
In wildKEV
VF
VMG4325-B10A firmware
Zyxel
8.8
23%
Feb 4Zyxel DSL CPE OS Command Injection Vulnerability
CVE-2024-40890
In wildKEV
VF
VMG4325-B10A firmware
Zyxel
8.8
21%
Feb 4Zyxel DSL CPE OS Command Injection Vulnerability
CVE-2024-12398
WF
Wax655e Firmware
Zyxel
8.8
1%
Jan 14An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S firmware versions through…
CVE-2024-9200
VF
Vmg4005-b60a Firmware
Zyxel
7.2
1%
Dec 3A post-authentication command injection vulnerability in the "host" parameter of the diagnostic function in Zyxel VMG4005-B50A firmware versions through V5.15(ABQA.2.2)C0 could…
CVE-2024-9197
VF
Vmg8623-t50b Firmware
Zyxel
4.9
1%
Dec 3A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an…
CVE-2024-8748
PF
Px5301-t0 Firmware
Zyxel
7.5
1%
Dec 3A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50(ABOM.8.4)C0 could allow an…
CVE-2024-11667
RansomwareIn wildKEV
UF
USG FLEX 50(W) series firmware
Zyxel
9.8
3%
Nov 27Zyxel Multiple Firewalls Path Traversal Vulnerability
CVE-2024-11494
PF
P6101c Firmware
Zyxel
7.5
1%
Nov 20**UNSUPPORTED WHEN ASSIGNED** The improper authentication vulnerability in the Zyxel P-6101C ADSL modem firmware version P-6101CSA6AP_20140331 could allow an unauthenticated…
CVE-2024-8882
GF
Gs1900-48 Firmware
Zyxel
4.5
0%
Nov 12A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with…
CVE-2024-8881
GF
Gs1900-24hpv2 Firmware
Zyxel
6.8
1%
Nov 12A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated,…
CVE-2024-9677
UO
Uos
Zyxel
7.8
0%
Oct 22The insufficiently protected credentials vulnerability in the CLI command of the USG FLEX H series uOS firmware version V1.21 and earlier versions could allow an authenticated…
CVE-2024-38269
EF
Ex5401-b1 Firmware
Zyxel
4.9
0%
Sep 24An improper restriction of operations within the bounds of a memory buffer in the USB file-sharing handler of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could…
CVE-2024-38268
EF
Ex5510-b0 Firmware
Zyxel
4.9
0%
Sep 24An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could allow…
CVE-2024-38267
VF
Vmg3927-t50k Firmware
Zyxel
4.9
0%
Sep 24An improper restriction of operations within the bounds of a memory buffer in the IPv6 address parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could…
CVE-2024-38266
EF
Ex3510-b1 Firmware
Zyxel
4.9
0%
Sep 24An improper restriction of operations within the bounds of a memory buffer in the parameter type parser of the Zyxel VMG8825-T50K firmware versions through 5.50(ABOM.8)C0 could…
CVE-2024-6342
NF
NAS542 firmware
Zyxel
9.8
2%
Sep 10**UNSUPPORTED WHEN ASSIGNED** A command injection vulnerability in the export-cgi program of Zyxel NAS326 firmware versions through V5.21(AAZF.18)C0 and NAS542 firmware versions…
CVE-2024-38270
GF
GS1900-10HP firmware
Zyxel
6.5
0%
Sep 10An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authentication tokens generation exists in the Zyxel GS1900-10HP…
CVE-2024-7261
WF
WBE530 firmware
Zyxel
9.8
11%
Sep 3The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4) and earlier, WAC500 firmware version…
CVE-2024-42061
US
USG20(W)-VPN series firmware
Zyxel
6.1
0%
Sep 3A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series…
CVE-2024-42060
AS
ATP series firmware
Zyxel
7.2
1%
Sep 3A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38,…
CVE-2024-42059
UF
USG FLEX 50(W) series firmware
Zyxel
7.2
1%
Sep 3A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware versions from V5.00 through V5.38,…
CVE-2024-42058
US
USG20(W)-VPN series firmware
Zyxel
7.5
1%
Sep 3A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W)…
CVE-2024-42057
UF
USG FLEX 50(W) series firmware
Zyxel
8.1
1%
Sep 3A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through…
CVE-2024-7203
UF
USG FLEX series firmware
Zyxel
7.2
1%
Sep 3A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38…