CVE-2025-6265

🗓️ 15 Jul 2025 02:15:28Reported by [email protected]Type

nvd🔗 web.nvd.nist.gov👁 16 Views

Path traversal vulnerability in Zyxel NWA50AX PRO firmware allows admin access to directories and files

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the fileupload-cgi CGI script of the Zyxel networking devices allows a perpetrator to gain unauthorized access to protected information.	14 Aug 202500:00	–	bdu_fstec
Circl	CVE-2025-6265	15 Jul 202512:32	–	circl
CNNVD	Zyxel NWA50AX PRO 路径遍历漏洞	15 Jul 202500:00	–	cnnvd
CVE	CVE-2025-6265	15 Jul 202501:32	–	cve
Cvelist	CVE-2025-6265	15 Jul 202501:32	–	cvelist
EUVD	EUVD-2025-21410	3 Oct 202520:07	–	euvd
OSV	CVE-2025-6265	15 Jul 202502:15	–	osv
Positive Technologies	PT-2025-29534 · Zyxel · Zyxel Nwa50Ax Pro	15 Jul 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-6265: Improper Limitation of a Pathname to a Restricted Directory	15 Jul 202500:00	–	rapid7
RedhatCVE	CVE-2025-6265	17 Jul 202501:45	–	redhatcve

NVD

Node

AND

zyxel nwa50ax_firmwareRange≤7.10(abyw.1)

zyxel nwa50axMatch-

Node

AND

zyxel nwa50ax_pro_firmwareRange≤7.10(acge.2)

zyxel nwa50ax_proMatch-

Node

AND

zyxel nwa55axe_firmwareRange≤7.10(abzl.1)

zyxel nwa55axeMatch-

Node

AND

zyxel nwa90ax_firmwareRange≤7.10(accv.1)

zyxel nwa90axMatch-

Node

AND

zyxel nwa90ax_pro_firmwareRange≤7.10(acgf.2)

zyxel nwa90ax_proMatch-

Node

AND

zyxel nwa110ax_firmwareRange≤7.10(abtg.1)

zyxel nwa110axMatch-

Node

AND

zyxel nwa130be_firmwareRange≤7.10(acil.2)

zyxel nwa130beMatch-

Node

AND

zyxel nwa210ax_firmwareRange≤7.10(abtd.1)

zyxel nwa210axMatch-

Node

AND

zyxel nwa220ax-6e_firmwareRange≤7.10(acco.1)

zyxel nwa220ax-6eMatch-

Node

AND

zyxel nwa1123ac_pro_firmwareRange≤6.28(abhd.3)

zyxel nwa1123ac_proMatch-

Node

AND

zyxel wac500h_firmwareRange≤6.70(abwa.6)

zyxel wac500hMatch-

Node

AND

zyxel wac5302d-sv2_firmwareRange≤6.25(abvz.9)

zyxel wac5302d-sv2Match-

Node

AND

zyxel wac6103d-i_firmwareRange≤6.28(aaxh.3)

zyxel wac6103d-iMatch-

Node

AND

zyxel wax300h_firmwareRange≤7.10(achf.1)

zyxel wax300hMatch-

Node

AND

zyxel wax510d_firmwareRange≤7.10(abtf.1)

zyxel wax510dMatch-

Node

AND

zyxel wax610d_firmwareRange≤7.10(abte.1)

zyxel wax610dMatch-

Node

AND

zyxel wax620d-6e_firmwareRange≤7.10(accn.1)

zyxel wax620d-6eMatch-

Node

AND

zyxel wax630s_firmwareRange≤7.10(abzd.1)

zyxel wax630sMatch-

Node

AND

zyxel wax640s-6e_firmwareRange≤7.10(accm.1)

zyxel wax640s-6eMatch-

Node

AND

zyxel wax650s_firmwareRange≤7.10(abrm.1)

zyxel wax650sMatch-

Node

AND

zyxel wax655e_firmwareRange≤7.10(acdo.1)

zyxel wax655eMatch-

Node

AND

zyxel wbe530_firmwareRange≤7.10(acle.2)

zyxel wbe530Match-

Node

AND

zyxel wbe660s_firmwareRange≤7.10(acgg.2)

zyxel wbe660sMatch-

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-path-traversal-vulnerability-in-aps-07-15-2025

17 Jun 2026 10:01Current

CVSS 3.17.2

EPSS0.00575

SSVC

path traversal vulnerability zyxel nwa50ax pro file deletion configuration file access admin privileges