CVE-2025-13942

🗓️ 24 Feb 2026 03:16:00Reported by [email protected]Type

Command injection in Zyxel EX3510-B0 UPnP enables remote OS command execution via crafted SOAP requests.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-13942	24 Feb 202604:01	–	circl
CNNVD	Zyxel EX3510-B0 操作系统命令注入漏洞	24 Feb 202600:00	–	cnnvd
CNVD	Zyxel EX3510-B0 UPnP command injection vulnerability	2 Mar 202600:00	–	cnvd
CVE	CVE-2025-13942	24 Feb 202602:32	–	cve
Cvelist	CVE-2025-13942	24 Feb 202602:32	–	cvelist
EUVD	EUVD-2025-207551	24 Feb 202602:32	–	euvd
OSV	CVE-2025-13942	24 Feb 202603:16	–	osv
Positive Technologies	PT-2026-21643	24 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-13942	25 Feb 202604:06	–	redhatcve
The Hacker News	⚡ Weekly Recap: SD-WAN 0-Day, Critical CVEs, Telegram Probe, Smart TV Proxy SDK and More	2 Mar 202613:26	–	thn

NVD

Node

zyxel wx5610-b0_firmwareRange<5.18(acgj.0.5)c0

AND

zyxel wx5610-b0Match-

Node

zyxel lte3301-plus_firmwareRange<1.00(abqu.9)c0

AND

zyxel lte3301-plusMatch-

Node

zyxel nebula_lte3301-plus_firmwareRange<1.18(acca.6)v0

AND

zyxel nebula_lte3301-plusMatch-

Node

zyxel nr7101_firmwareRange<1.00(abuv.12)b2

AND

zyxel nr7101Match-

Node

zyxel nebula_nr7101_firmwareRange<1.16(accc.1)v0

AND

zyxel nebula_nr7101Match-

Node

zyxel dx4510-b0_firmwareRange<5.17(abyl.10.1)c0

AND

zyxel dx4510-b0Match-

Node

zyxel dx4510-b1_firmwareRange<5.17(abyl.10.1)c0

AND

zyxel dx4510-b1Match-

Node

zyxel ee6510-10_firmwareRange<5.19(acjq.4.1)c0

AND

zyxel ee6510-10Match-

Node

zyxel emg6726-b10a_firmwareRange<5.13(abnp.8.2)c1

AND

zyxel emg6726-b10aMatch-

Node

zyxel ex2210-t0_firmwareRange<5.50(acdi.2.4)c0

AND

zyxel ex2210-t0Match-

Node

zyxel ex3510-b0_firmwareRange<5.17(abup.15.2)c0

AND

zyxel ex3510-b0Match-

Node

zyxel ex3510-b1_firmwareRange<5.17(abup.15.2)c0

AND

zyxel ex3510-b1Match-

Node

zyxel ex5510-b0_firmwareRange<5.17(abqx.11.1)c0

AND

zyxel ex5510-b0Match-

Node

zyxel ex5512-t0_firmwareRange<5.70(aceg.5.4)c0

AND

zyxel ex5512-t0Match-

Node

zyxel ex7710-b0_firmwareRange<5.18(acak.1.6)c0

AND

zyxel ex7710-b0Match-

Node

zyxel vmg4927-b50a_firmwareRange<5.13(ably.10.2)c0

AND

zyxel vmg4927-b50aMatch-

Node

zyxel px3321-t1_firmwareRange<5.44(acjb.1.5)c0

AND

zyxel px3321-t1Match-

Node

zyxel px3321-t1_firmwareRange<5.44(achk.3)c0

AND

zyxel px3321-t1Match-

Node

zyxel px5301-t0_firmwareRange<5.44(ackb.0.6)c0

AND

zyxel px5301-t0Match-

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-null-pointer-dereference-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-02-24-2026

17 Jun 2026 08:35Current

CVSS 3.19.8

EPSS0.0106

CWE-78