CVE-2026-1459

🗓️ 24 Feb 2026 02:48:35Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 9 Views

CVE-2026-1459: Post authentication command injection on Zyxel VMG3625-T50B certificate download interface lets admin run OS commands.

Reporter	Title	Published	Views	Family All 10
GithubExploit	Exploit for OS Command Injection in Zyxel Vmg8623-T50B_Firmware	23 Apr 202623:22	–	githubexploit
Circl	CVE-2026-1459	24 Feb 202606:00	–	circl
CNNVD	Zyxel VMG3625-T50B 操作系统命令注入漏洞	24 Feb 202600:00	–	cnnvd
Cvelist	CVE-2026-1459	24 Feb 202602:48	–	cvelist
EUVD	EUVD-2026-7399	24 Feb 202602:48	–	euvd
NVD	CVE-2026-1459	24 Feb 202603:16	–	nvd
Positive Technologies	PT-2026-21645	24 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-1459	25 Feb 202604:06	–	redhatcve
The Hacker News	⚡ Weekly Recap: SD-WAN 0-Day, Critical CVEs, Telegram Probe, Smart TV Proxy SDK and More	2 Mar 202613:26	–	thn
Vulnrichment	CVE-2026-1459	24 Feb 202602:48	–	vulnrichment

NVD

Node

zyxel vmg8623-t50b_firmwareRange≤5.50(abpm.9.7)c0

AND

zyxel vmg8623-t50bMatch-

Node

zyxel dx5401-b1_firmwareRange≤5.17(abyo.7.1)c0

AND

zyxel dx5401-b1Match-

Node

zyxel emg3525-t50b_firmwareRange≤5.50(abpm.9.7)c0

AND

zyxel emg3525-t50bMatch-

Node

zyxel emg5523-t50b_firmwareRange≤5.50(abpm.9.7)c0

AND

zyxel emg5523-t50bMatch-

Node

zyxel vmg3625-t50b_firmwareRange≤5.50(abpm.9.7)c0

AND

zyxel vmg3625-t50bMatch-

Node

zyxel vmg3625-t50c_firmwareRange≤5.50(abpm.9.7)c0

AND

zyxel vmg3625-t50cMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "VMG3625-T50B firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 5.50(ABPM.9.7)C0"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-null-pointer-dereference-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-02-24-2026

25 Feb 2026 18:05Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.2

EPSS0.00035

SSVC

CWE-78