[CVE-2026-1460] Vulnerability Fix

Zyxel_CSO

CVE ID

• CVE-2026-1460

Affected model & Version

Model	Version	Vulnerability Fix Version
Nebula LTE3301-PLUS	1.18(ACCA.6)C0 and earlier	1.18(ACCA.7)V0
Nebula LTE7461-M602	1.15(ACEV.4)C0 and earlier	1.15(ACEV.4)V0
Nebula NR5101	1.16(ACCG.1)C0 and earlier	1.16(ACCG.1)V0
Nebula NR7101	1.16(ACCC.1)C0 and earlier	1.16(ACCC.2)V0
Nebula FWA505	1.60(ACKO.2)C0 and earlier	1.60(ACKO.3)V0
Nebula FWA510	1.60(ACGD.0)C0 and earlier	1.60(ACGD.1)V0
Nebula FWA710	1.60(ACGC.1)C0 and earlier	1.60(ACGC.2)V0
Nebula FWA515	1.60(ACPZ.0)C0 and earlier	1.60(ACPZ.1)V0
Nebula FWA70	1.51(ACRF.0)C0 and earlier	1.51(ACRF.0)V0

Important Notes & Warnings

• Mobile routers operate over cellular networks, which are typically deployed behind Internet Service Provider Carrier-Grade NAT (CGNAT).As a result, the practical exploitation risk of this vulnerability is considered low in typical deployment scenarios. The V0 vulnerability fix firmware for the Nebula LTE3301-PLUS, Nebula LTE7461-M602, Nebula NR5101, Nebula NR7101, Nebula FWA505, Nebula FWA510, Nebula FWA710, Nebula FWA515 and Nebula FWA710 models is provided exclusively for users with urgent security concerns and will be incorporated into the official Nebula patch firmware release, currently planned for the early July 2026.
  
  ⚠️ Important: Upgrading to the security fix firmware will disable Nebula cloud managementfunctionality

Before upgrading, please ensure a complete configuration backup is performed: Maintenance > Backup/Restore

Requesting the Fix Firmware

Please carefully review the Important Notes &Warnings section above and ensure you fully understand the impact, including the loss of Nebula cloud management after upgrading.

If you accept these limitations and still require the vulnerability fix firmware, please create a post to request the vulnerability fix firmware at:

🔗Wireless - Zyxel Community

We will assist accordingly.