[CVEs] Vulnerability Fix

Options
Zyxel_HsinBo
Zyxel_HsinBo Posts: 530
Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - WLAN
image  Zyxel Employee
edited October 12 in Vulnerability

CVE ID

  • CVE-2025-20674
  • CVE-2026-2291
  • CVE-2026-4890
  • CVE-2026-4891
  • CVE-2026-4892
  • CVE-2026-4893
  • CVE-2026-5172
  • CVE-2026-12489

Affected model & Version

Model

Version

Vulnerability Fix Version

FWA505v2

1.70(ACRH.0)C0 and earlier

*1.70(ACRH.0)V0

FWA515

1.70(ACPZ.1)C0 and earlier

*1.70(ACPZ.0)V0

FWA70

1.70(ACRF.0)C0 and earlier

*1.70(ACRF.0)V0

* : Provided upon request. Please ensure you are aware of the following session below.


Important Notes & Warnings

  • Mobile routers operate over cellular networks, which are typically deployed behind Internet Service Provider Carrier-Grade NAT (CGNAT).As a result, the practical exploitation risk of this vulnerability is considered low in typical deployment scenarios. The V0 vulnerability fix firmware for the FWA505v2, FWA515 and FWA70 models is provided exclusively for users with urgent security concerns.

    ⚠️ Important: Upgrading to the security fix firmware will disable Nebula cloud management functionality

Before upgrading, please ensure a complete configuration backup is performed: Maintenance > Backup/Restore

Requesting the Fix Firmware

Please carefully review the "Important Notes & Warnings" section above and ensure you fully understand the impact, including the loss of Nebula cloud management after upgrading.

If you accept these limitations and still require the vulnerability fix firmware, please create a post to request the vulnerability fix firmware at:

🔗Wireless - Zyxel Community

We will assist accordingly.

Categories

EnglishTiếng ViệtРусскийไทย中文（台灣）