[Vulnerability Hotfix] CVE-2025-11730 Path Traversal Vulnerability

Zyxel_Melen

Firmware version ZLD 5.42 addresses the potential CVE-2025-11730 path traversal vulnerability.

Please download the corresponding firmware version from the links below:

Model	Patch Availability
ATP500	5.42(ABFU.0) ITS-26WK06
ATP700	5.42(ABTJ.0) ITS-26WK06
ATP800	5.42(ABIQ.0) ITS-26WK06
USG FLEX 500	5.42(ABUJ.0) ITS-26WK06
USG FLEX 700	5.42(ABWD.0) ITS-26WK06

Recommendation: For devices deployed in an HA environment, please do not install this hotfix. We recommend waiting for the upcoming official firmware release.

Zyxel_Melen

Update:

Official firmware for these devices are released. Please check this post:

https://community.zyxel.com/en/discussion/32338/zywall-usg-flex-series-atp-series-v5-42patch-1-firmware-release