Zyxel vulnerabilities
172 published CVEs name Zyxel among the affected products; CISA lists 10 of them as exploited in the wild.
- 172Published CVEs172 of them scored
- 28Last 12 monthspublished in the last year
- 26Critical74 more rated high
- 10Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-7273
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based,…
Zyxel · GS1900-48HPv2 firmware
ExploitedHigh8.8 - CVE-2024-40891
**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A…
Zyxel · VMG4325-B10A firmware
ExploitedHigh8.8 - CVE-2024-40890
**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware…
Zyxel · VMG4325-B10A firmware
ExploitedHigh8.8 - CVE-2024-11667
A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware…
Zyxel · ATP series firmware
ExploitedHigh7.5 - CVE-2023-27992
The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to…
Zyxel · NAS326 firmware
ExploitedCritical9.8 - CVE-2023-33009
A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions…
Zyxel · ATP series firmware
ExploitedCritical9.8 - CVE-2023-33010
A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware…
Zyxel · ATP series firmware
ExploitedCritical9.8 - CVE-2023-28771
Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series…
Zyxel · ZyWALL/USG series firmware
ExploitedCritical9.8 - CVE-2022-30525
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions…
Zyxel · USG FLEX 100(W) firmware
ExploitedCritical9.8 - CVE-2020-9054
ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi
ZyXEL · NAS326
ExploitedCritical9.8