Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Zyxel

182 known vulnerabilities

1
CRITICAL
5
HIGH
8
MEDIUM

Top Products

wre6505 firmware 4 wre6505 4 nebula fwa515 firmware 4 nebula fwa515 4 dx5401-b1 firmware 4 dx5401-b1 4 nebula fwa505 firmware 3 nebula fwa505 3 nebula fwa510 firmware 3 nebula fwa510 3
14 CVEs
7.5
CVE-2026-7287

** UNSUPPORTED WHEN ASSIGNED ** A buffer overflow vulnerability in the formWep(), formWlAc(), formPasswordSetup(), formU

4.4
CVE-2026-7257

** UNSUPPORTED WHEN ASSIGNED ** An insecure storage of sensitive information vulnerability in the configuration file of

8.8
CVE-2026-7256

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware versio

6.5
CVE-2026-7255

** UNSUPPORTED WHEN ASSIGNED ** An improper restriction of excessive authentication attempts vulnerability in the web ma

7.2
CVE-2026-1460

A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zy

6.8
CVE-2026-0711

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions

4.5
CVE-2026-6058

** UNSUPPORTED WHEN ASSIGNED ** An improper encoding or escaping vulnerability in the CGI program of Zyxel WRE6505 v2 fi

7.2
CVE-2026-1459

A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG362

8.8
CVE-2025-13943

A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware

9.8
CVE-2025-13942

A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C

4.9
CVE-2025-11848

A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version throu

4.9
CVE-2025-11847

A null pointer dereference vulnerability in the IP settings CGI program of the Zyxel VMG3625-T50B firmware versions thro

4.9
CVE-2025-11846

A null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625-T50B firmware versions

4.9
CVE-2025-11845

A null pointer dereference vulnerability in the certificate downloader CGI program of the Zyxel VMG3625-T50B firmware ve

Frequently Asked Questions

How many CVEs affect Zyxel?

Zyxel has 182 CVE records in our database, including 20 critical and 56 high severity vulnerabilities.

What are the most severe Zyxel vulnerabilities?

Zyxel has 20 critical severity (CVSS 9.0+) and 56 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.

How can I scan for Zyxel vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Zyxel products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Zyxel Vulnerabilities

CyberStrike scans your infrastructure for Zyxel vulnerabilities and provides real-time remediation guidance.

Get Started