Vulnerability · Published May 12, 2026 · Assigned by Zyxel
CVE-2026-7257
Medium 4.4
In plain English
A medium-severity security flaw in WRE6505 v2 firmware from Zyxel. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).
Severity (CVSS 3.1)4.4Medium
Exploit odds (30 days)0.1%top 98.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
** UNSUPPORTED WHEN ASSIGNED ** An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow a local attacker with administrator privileges to download and decrypt a backup configuration file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Zyxel | WRE6505 v2 firmware | V1.00(ABDV.3)C0 |
Weakness: CWE-922 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N