Security Advisories

Security Advisories
Security Advisories

Zyxel's latest security announcements and advices

CVE ID Title Last Updated
CVE-2026-14818
Zyxel security advisory for path traversal vulnerability in the configuration file execution CLI command of ZLD firewalls
CVE-2026-6837
CVE-2026-8508
Zyxel security advisory for command injection and improper authentication vulnerabilities in certain APs, FWA7, and Security Routers
CVE-2026-6952
Zyxel security advisory for post-authentication command injection vulnerability in certain DSL/Ethernet CPE, Fiber ONTs, and Wireless Extenders
CVE-2026-7273
Zyxel security advisory for stack-based buffer overflow vulnerability in GS1900 series switches
CVE-2026-3870
CVE-2026-3871
Zyxel security advisory for buffer overflow vulnerabilities in the UPnP function of certain 4G LTE/5G NR CPE and DSL/Ethernet CPE
CVE-2026-4795
Zyxel security advisory for missing authorization vulnerability in GS1200v3 series switches
CVE-2026-0711
CVE-2026-1460
Zyxel security advisory for command injection vulnerabilities in certain 4G LTE/5G NR CPE, DSL/Ethernet CPE, Fiber ONTs, and Wireless Extenders
CVE-2025-11845
CVE-2025-11846
CVE-2025-11847
CVE-2025-11848
CVE-2025-13942
CVE-2025-13943
CVE-2026-1459
Zyxel security advisory for null pointer dereference and command injection vulnerabilities in certain 4G LTE/5G NR CPE, DSL/Ethernet CPE, Fiber ONTs, Security Routers, and Wireless Extenders
CVE-2025-11730
Zyxel security advisory for post-authentication command injection vulnerability in the DDNS configuration CLI command of ZLD firewalls
CVE-2025-6599
CVE-2025-8693
Zyxel security advisory for uncontrolled resource consumption and command injection vulnerabilities in certain 4G LTE/5G NR CPE, DSL/Ethernet CPE, Fiber ONTs, Security Routers, and Wireless Extenders