CVE-2025-6265

🗓️ 15 Jul 2025 02:15:28Reported by [email protected]Type

nvd🔗 web.nvd.nist.gov👁 22 Views

Path traversal vulnerability in Zyxel NWA50AX PRO firmware allows admin access to directories and files

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	Zyxel networking devices File Upload Unauthorized Access	14 Aug 202500:00	–	bdu_fstec
Circl	CVE-2025-6265	15 Jul 202512:32	–	circl
CNNVD	Zyxel NWA50AX PRO has a path traversal vulnerability	15 Jul 202500:00	–	cnnvd
CVE	CVE-2025-6265	15 Jul 202501:32	–	cve
Cvelist	CVE-2025-6265	15 Jul 202501:32	–	cvelist
EUVD	EUVD-2025-21410	3 Oct 202520:07	–	euvd
osv_cve	CVE-2025-6265	15 Jul 202502:15	–	osv_cve
Positive Technologies	PT-2025-29534 · Zyxel · Zyxel Nwa50Ax Pro	15 Jul 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-6265: Improper Limitation of a Pathname to a Restricted Directory	15 Jul 202500:00	–	rapid7
RedhatCVE	CVE-2025-6265	17 Jul 202501:45	–	redhatcve

NVD

Node

AND

zyxel nwa50ax_firmwareRange≤7.10(abyw.1)

zyxel nwa50axMatch-

Node

AND

zyxel nwa50ax_pro_firmwareRange≤7.10(acge.2)

zyxel nwa50ax_proMatch-

Node

AND

zyxel nwa55axe_firmwareRange≤7.10(abzl.1)

zyxel nwa55axeMatch-

Node

AND

zyxel nwa90ax_firmwareRange≤7.10(accv.1)

zyxel nwa90axMatch-

Node

AND

zyxel nwa90ax_pro_firmwareRange≤7.10(acgf.2)

zyxel nwa90ax_proMatch-

Node

AND

zyxel nwa110ax_firmwareRange≤7.10(abtg.1)

zyxel nwa110axMatch-

Node

AND

zyxel nwa130be_firmwareRange≤7.10(acil.2)

zyxel nwa130beMatch-

Node

AND

zyxel nwa210ax_firmwareRange≤7.10(abtd.1)

zyxel nwa210axMatch-

Node

AND

zyxel nwa220ax-6e_firmwareRange≤7.10(acco.1)

zyxel nwa220ax-6eMatch-

Node

AND

zyxel nwa1123ac_pro_firmwareRange≤6.28(abhd.3)

zyxel nwa1123ac_proMatch-

Node

AND

zyxel wac500h_firmwareRange≤6.70(abwa.6)

zyxel wac500hMatch-

Node

AND

zyxel wac5302d-sv2_firmwareRange≤6.25(abvz.9)

zyxel wac5302d-sv2Match-

Node

AND

zyxel wac6103d-i_firmwareRange≤6.28(aaxh.3)

zyxel wac6103d-iMatch-

Node

AND

zyxel wax300h_firmwareRange≤7.10(achf.1)

zyxel wax300hMatch-

Node

AND

zyxel wax510d_firmwareRange≤7.10(abtf.1)

zyxel wax510dMatch-

Node

AND

zyxel wax610d_firmwareRange≤7.10(abte.1)

zyxel wax610dMatch-

Node

AND

zyxel wax620d-6e_firmwareRange≤7.10(accn.1)

zyxel wax620d-6eMatch-

Node

AND

zyxel wax630s_firmwareRange≤7.10(abzd.1)

zyxel wax630sMatch-

Node

AND

zyxel wax640s-6e_firmwareRange≤7.10(accm.1)

zyxel wax640s-6eMatch-

Node

AND

zyxel wax650s_firmwareRange≤7.10(abrm.1)

zyxel wax650sMatch-

Node

AND

zyxel wax655e_firmwareRange≤7.10(acdo.1)

zyxel wax655eMatch-

Node

AND

zyxel wbe530_firmwareRange≤7.10(acle.2)

zyxel wbe530Match-

Node

AND

zyxel wbe660s_firmwareRange≤7.10(acgg.2)

zyxel wbe660sMatch-

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-path-traversal-vulnerability-in-aps-07-15-2025

17 Jun 2026 10:01Current

CVSS 3.17.2

EPSS0.00617

SSVC

path traversal vulnerability zyxel nwa50ax pro file deletion configuration file access admin privileges