Vulnerability · Published Apr 21, 2026 · Assigned by Zyxel

CVE-2026-6058

Medium 4.5

In plain English

A medium-severity security flaw in WRE6505 v2 firmware from Zyxel. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).

Severity (CVSS 3.1)4.5Medium

Exploit odds (30 days)0.2%top 92.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

** UNSUPPORTED WHEN ASSIGNED ** An improper encoding or escaping vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the WLAN to cause a denial-of-service (DoS) condition in the web management interface by convincing an authenticated administrator to visit the “AP Select” page while a malformed SSID is present.

Affected products (as reported)

Vendor	Product	Versions
Zyxel	WRE6505 v2 firmware	V1.00(ABDV.3)C0

Weakness: CWE-116 · Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

References

https://www.zyxel.com/global/en/support/end-of-life