Log in Start free

ZyXEL

Products

ProductCVEsExploitedLatest
ATP series Firmware495Aug 4, 2026
USG FLEX series Firmware514Aug 4, 2026
VPN series Firmware374Nov 28, 2023
USG FLEX 50(W) firmware113May 24, 2023
ZyWALL/USG series firmware53May 24, 2023
USG20(W)-VPN firmware82May 24, 2023
VMG4325-B10A firmware32Feb 4, 2025
USG FLEX 50(W) series firmware281Aug 4, 2026
USG20(W)-VPN series firmware281Aug 4, 2026
NAS326 firmware151Sep 10, 2024
NAS542 firmware141Sep 10, 2024
GS1900-8 Firmware41Nov 3, 2026
GS1900-48 firmware41Nov 3, 2026
USG FLEX 500 firmware31Jul 19, 2022
GS1900-24EP firmware31Nov 3, 2026
USG FLEX 700 firmware31Jul 19, 2022
USG FLEX 200 firmware31Jul 19, 2022
USG FLEX 100(W) firmware31Jul 19, 2022
GS1900-8HP firmware31Nov 3, 2026
USG 20(W)-VPN firmware31Jul 19, 2022
GS1900-10HP firmware31Nov 3, 2026
GS1900-24E firmware21Nov 3, 2026
GS1900-48HPv2 firmware21Nov 3, 2026
GS1900-16 firmware21Nov 3, 2026
GS1900-24 firmware21Nov 3, 2026
NSA31011Mar 4, 2020
NSA21011Mar 4, 2020
NSA22011Mar 4, 2020
NSA32011Mar 4, 2020
NAS52011Mar 4, 2020
NAS54011Mar 4, 2020
NAS540 firmware11Jun 19, 2023
NAS54211Mar 4, 2020
NSA22111Mar 4, 2020
NSA325v211Mar 4, 2020
NSA220+11Mar 4, 2020
NSA32511Mar 4, 2020
NSA320S11Mar 4, 2020
GS1900-24HPv2 firmware11Jun 16, 2026
NAS32611Mar 4, 2020
USG/ZyWALL series firmware8–Jul 19, 2022
VMG8825-T50K firmware8–Jul 16, 2025
VMG3625-T50B firmware7–Feb 24, 2026
WAC500 firmware7–Sep 3, 2024
NR7101 firmware5–Jun 5, 2023
NWA50AX firmware5–Feb 20, 2024
WBE660S firmware5–Jan 14, 2025
NBG-418N v2 firmware5–May 1, 2023
WRE6505 v2 firmware4–May 12, 2026
WX3100-T0 firmware4–Feb 24, 2026
NXC2500 firmware4–Jul 17, 2023
WAX510D firmware3–Apr 24, 2023
USG FLEX H series uOS firmware3–Apr 22, 2025
WAX300H firmware3–Feb 20, 2024
NSG series firmware3–May 24, 2022
NWA110AX firmware3–Nov 3, 2026
AX7501-B1 firmware2–Jul 21, 2026
NBG6604 series firmware2–Dec 29, 2021
VMG3312-T20A firmware2–Apr 11, 2022
NWA1100-N firmware2–May 12, 2026
DX3301-T0 firmware2–Apr 28, 2026
USG FLEX H series firmware2–Feb 20, 2024
DX5401-B0 firmware2–Apr 27, 2023
NBG6604 firmware2–Aug 14, 2023
ZyWALL VPN2S Firmware2–Sep 29, 2021
NAP203 firmware2–May 24, 2022
NXC5500 firmware2–Jul 17, 2023
AX7501-B0 firmware2–Jan 17, 2023
ARMOR Z2 (NBG6817) firmware2–Feb 22, 2022
GS1900 series firmware2–Dec 28, 2021
EX3301-T0 firmware2–Apr 28, 2026
WBE530 firmware2–Jan 14, 2025
WAX650S firmware2–Aug 4, 2026
VMG4005-B50B firmware2–Jun 2, 2026
ARMOR Z1 (NBG6816) firmware2–Feb 22, 2022
DX3300-T0 firmware2–Apr 28, 2026
Zyxel NAS326 firmware1–Sep 6, 2022
DX3300-T1 firmware1–May 21, 2024
EX3501-T0 firmware1–Oct 20, 2026
EX3510-B0 firmware1–Feb 24, 2026
EX5601-T1 firmware1–Mar 11, 2025
GS1200-10v3 firmware1–May 26, 2026
GS1200-5HPv3 firmware1–May 26, 2026
GS1200-5v3 firmware1–May 26, 2026
GS1200-8HPv3 firmware1–May 26, 2026
GS1200-8v3 firmware1–May 26, 2026
GS1900-HPv2 firmware1–Nov 3, 2026
GS1920-24v2 firmware1–Jan 11, 2023
LTE3301-M2091–Nov 22, 2022
LTE3316-M6041–Feb 21, 2023
NBG6818 series firmware1–Nov 23, 2021
NBG7510 firmware1–Dec 21, 2022
NBG7815 series firmware1–Nov 23, 2021
NWA1100-NH firmware1–Mar 1, 2022
NWA1123ACv3 firmware1–Sep 3, 2024
NWA50AX PRO firmware1–Jul 15, 2025
P-6101C firmware1–Nov 20, 2024
PMG2005-T20B1–Sep 27, 2023
SecuExtender SSL VPN Client1–Nov 20, 2023
USG LITE 60AX firmware1–Sep 3, 2024
V5.50(ABPM.8)C0 firmware1–May 21, 2024
VMG4005-B50A firmware1–Dec 3, 2024
WAX655E firmware1–Sep 3, 2024
WSQ20 series firmware1–Nov 23, 2021
WSQ50 series firmware1–Nov 23, 2021
WSQ60 series firmware1–Nov 23, 2021
WSR30 series firmware1–Nov 23, 2021
XGS1210 series firmware1–Dec 28, 2021
XGS1250 series firmware1–Dec 28, 2021
XGS2220-30 firmware1–Aug 14, 2023
XMG1930-30 firmware1–Aug 14, 2023
XS1930-10 firmware1–Aug 14, 2023
Zyxel AP Configurator (ZAC)1–Apr 11, 2022
Zyxel GS1200 series firmware1–Jun 7, 2022
Zyxel GS1900 series firmware1–Sep 20, 2022
AMG1302-T10B firmware1–Apr 22, 2025

Exploited and recent CVEs

  • CVE-2026-7273 High 8.8 Exploited A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and 2.7%
  • CVE-2026-7273 High 8.8 Exploited A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and 2.7%
  • CVE-2026-7273 High 8.8 Exploited A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and 2.7%
  • CVE-2026-7273 High 8.8 Exploited A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and 2.7%
  • CVE-2026-7273 High 8.8 Exploited A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and 2.7%
  • CVE-2026-7273 High 8.8 Exploited A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and 2.7%
  • CVE-2026-7273 High 8.8 Exploited A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and 2.7%
  • CVE-2026-7273 High 8.8 Exploited A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and 2.7%
  • CVE-2026-7273 High 8.8 Exploited A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and 2.7%
  • CVE-2026-7273 High 8.8 Exploited A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and 2.7%
  • CVE-2024-40891 High 8.8 Exploited **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could a 22.9%
  • CVE-2024-40890 High 8.8 Exploited **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an 20.7%
  • CVE-2024-11667 High 7.5 Exploited A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) ser 3.0%
  • CVE-2024-11667 High 7.5 Exploited A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) ser 3.0%
  • CVE-2024-11667 High 7.5 Exploited A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) ser 3.0%
  • CVE-2024-11667 High 7.5 Exploited A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) ser 3.0%
  • CVE-2023-27992 Critical 9.8 Exploited The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions 82.3%
  • CVE-2023-27992 Critical 9.8 Exploited The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions 82.3%
  • CVE-2023-27992 Critical 9.8 Exploited The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions 82.3%
  • CVE-2023-33009 Critical 9.8 Exploited A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W 28.1%
  • CVE-2023-33010 Critical 9.8 Exploited A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50( 29.0%
  • CVE-2023-33009 Critical 9.8 Exploited A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W 28.1%
  • CVE-2023-33009 Critical 9.8 Exploited A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W 28.1%
  • CVE-2023-33010 Critical 9.8 Exploited A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50( 29.0%
  • CVE-2023-33010 Critical 9.8 Exploited A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50( 29.0%
  • CVE-2023-33009 Critical 9.8 Exploited A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W 28.1%
  • CVE-2023-33010 Critical 9.8 Exploited A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50( 29.0%
  • CVE-2023-33010 Critical 9.8 Exploited A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50( 29.0%
  • CVE-2023-33009 Critical 9.8 Exploited A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W 28.1%
  • CVE-2023-33009 Critical 9.8 Exploited A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W 28.1%