-
Zyxel statement for PHP core RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
CVEs:CVE-2026-109618, CVE-2026-109619 Summary Zyxel has been made aware of two remote code execution (RCE) vulnerabilities affecting certain versions of an open-source PHP package: CVE-2026-109618 and CVE-2026-109619. Following an investigation, Zyxel has confirmed that no Zyxel products currently available on the market…
-
Zyxel security advisory for incorrect authorization vulnerability in the DAL of certain 5G NR......
Zyxel security advisory for incorrect authorization vulnerability in the DAL of certain 5G NR CPE, DSL/Ethernet CPE, Fiber ONTs, and Wireless Extenders CVE:CVE-2026-12489 Summary Zyxel has released patches for specific firmware versions of certain 5G NR CPE, DSL/Ethernet CPE, Fiber ONTs, and Wireless Extenders to address…
-
Zyxel security advisory for command injection vulnerability in the WiFi SSID field of certain DSL...
Zyxel security advisory for command injection vulnerability in the WiFi SSID field of certain DSL/Ethernet CPE, Fiber ONTs, and Wireless Extenders CVE:CVE-2023-20820 Summary Zyxel has released patches for specific firmware versions of certain DSL/Ethernet CPE, Fiber ONTs, and Wireless Extenders devices using MediaTek WiFi…
-
Zyxel security advisory for path traversal vulnerability in the configuration file execution CLI ...
Zyxel security advisory for path traversal vulnerability in the configuration file execution CLI command of ZLD firewalls CVE:CVE-2026-14818 Summary Zyxel has released patches to address a path traversal vulnerability in certain versions of its ZLD firewall firmware. Users are advised to install these patches promptly to…
-
Zyxel security advisory for command injection and improper authentication vulnerabilities in...
Zyxel security advisory for command injection and improper authentication vulnerabilities in certain APs, FWA7, and Security Routers CVEs:CVE-2026-6837, CVE-2026-8508 Summary Zyxel has released patches for specific firmware versions of its APs, FWA7, and Security Routers. These updates address command injection and…
-
Zyxel security advisory for post-authentication command injection vulnerability in certain...
Zyxel security advisory for post-authentication command injection vulnerability in certain DSL/Ethernet CPE, Fiber ONTs, and Wireless Extenders CVE:CVE-2026-6952 Summary Zyxel has released patches for specific firmware versions of its DSL/Ethernet CPE, fiber ONTs, and Wireless Extenders. These updates address the command…
-
Zyxel security advisory for missing authorization vulnerability in GS1200v3 series switches
CVE:CVE-2026-4795 Summary Zyxel has released patches for GS1200v3 series switches affected by a missing authorization vulnerability. Users are advised to install them for optimal protection. What is the vulnerability? A missing authorization vulnerability in the Zyxel GS1200v3 series switch firmware could allow a LAN-based…
-
Zyxel security advisory for stack-based buffer overflow vulnerability in GS1900 series switches
CVE:CVE-2026-7273 Summary Zyxel has released patches for GS1900 series switches affected by a stack-based buffer overflow vulnerability. Users are advised to install them for optimal protection. What is the vulnerability? A stack-based buffer overflow vulnerability in the CGI program of the Zyxel GS1900 series switch…
-
Zyxel security advisory for buffer overflow vulnerabilities in the UPnP function of ...
Zyxel security advisory for buffer overflow vulnerabilities in the UPnP function of certain 4G LTE/5G NR CPE and DSL/Ethernet CPE CVEs: CVE-2026-3870, CVE-2026-3871 Summary Zyxel has released patches for specific firmware versions of certain 4G LTE/5G NR CPE and DSL/Ethernet CPE devices to address buffer overflow…
-
Zyxel security advisory for command injection vulnerabilities in certain 4G LTE/5G NR CPE, DSL/...
Zyxel security advisory for command injection vulnerabilities in certain 4G LTE/5G NR CPE, DSL/Ethernet CPE, Fiber ONTs, and Wireless Extenders CVEs:CVE-2026-0711, CVE-2026-1460 Summary Zyxel has released patches for specific firmware versions of its 4G LTE/5G NR CPE, DSL/Ethernet, CPE Fiber ONTs, and Wireless Extenders.…
-
Zyxel security advisory for null pointer dereference and command injection vulnerabilities in ...
Zyxel security advisory for null pointer dereference and command injection vulnerabilities in certain 4G LTE/5G NR CPE, DSL/Ethernet CPE, Fiber ONTs, Security Routers, and Wireless Extenders CVEs: CVE-2025-11845, CVE-2025-11846, CVE-2025-11847, CVE-2025-11848, CVE-2025-13942, CVE-2025-13943, CVE-2026-1459 Summary Zyxel has…
-
Zyxel security advisory for post-authentication command injection vulnerability in the DDNS .....
Zyxel security advisory for post-authentication command injection vulnerability in the DDNS configuration CLI command of ZLD firewalls CVE: CVE-2025-11730 Summary Zyxel has released patches addressing a post‑authentication command injection vulnerability in certain versions of the ZLD firewall firmware. Users are advised…
-
Zyxel security advisory for uncontrolled resource consumption and command injection vulnerabili.....
Zyxel security advisory for uncontrolled resource consumption and command injection vulnerabilities in certain 4G LTE/5G NR CPE, DSL/Ethernet CPE, Fiber ONTs, Security Routers, and Wireless Extenders CVEs: CVE-2025-6599, CVE-2025-8693 Summary Zyxel has released patches for certain firmware versions of its 4G LTE/5G NR CPE,…
-
Zyxel security advisory for post-authentication command injection and missing authorization......
Zyxel security advisory for post-authentication command injection and missing authorization vulnerabilities in ZLD firewalls CVEs: CVE-2025-8078, CVE-2025-9133 Summary Zyxel has released patches addressing a post-authentication command injection vulnerability and a missing authorization vulnerability in certain versions of…
-
Zyxel security advisory for path traversal vulnerability in APs
CVE: CVE-2025-6265 Summary Zyxel has released patches to address a path traversal vulnerability in the file_upload-cgi CGI program of certain access point (AP) firmware versions. Users are advised to install these patches for optimal protection. What is the vulnerability? The path traversal vulnerability in the…
-
Zyxel security advisory for incorrect permission assignment and improper privilege...
Zyxel security advisory for incorrect permission assignment and improper privilege management vulnerabilities in USG FLEX H series firewalls CVEs: CVE-2025-1731, CVE-2025-1732 Summary Zyxel has released patches to address incorrect permission assignment and improper privilege management vulnerabilities in the USG FLEX H…
-
Zyxel security advisory for post-authentication command injection vulnerabilities in ......
Zyxel security advisory for post-authentication command injection vulnerabilities in certain DSL/Ethernet CPE, fiber ONT, and WiFi extender devices CVEs: CVE-2024-11253, CVE-2024-12009, CVE-2024-12010 Summary Zyxel has released patches for certain DSL/Ethernet CPE, fiber ONT, and WiFi extender firmware versions affected by…
-
Zyxel security advisory for improper privilege management vulnerability in APs and security...
Zyxel security advisory for improper privilege management vulnerability in APs and security router devices CVE: CVE-2024-12398 Summary Zyxel has released patches to address an improper privilege management vulnerability in the web management interface of certain access point (AP) and security router firmware versions.…
-
Zyxel security advisory for buffer overflow and post-authentication command injection...
Zyxel security advisory for buffer overflow and post-authentication command injection vulnerabilities in some 4G LTE/5G NR CPE, DSL/Ethernet CPE,fiber ONTs, and WiFi extenders CVEs: CVE-2024-8748, CVE-2024-9197, CVE-2024-9200 Summary Zyxel has released patches for some 4G LTE/5G NR CPE, DSL/Ethernet CPE, fiber ONT, and…
-
Zyxel security advisory: protecting against recent firewall threats
Summary Zyxel is aware of recent attempts by threat actors to target Zyxel firewalls through previously disclosed vulnerabilities, as reported in Sekoia’s blog post. We confirm that the reported issues are not reproducible on firmware version 5.39, released on September 3, 2024. To safeguard devices, we have strongly urged…