CVE-2026-1460

🗓️ 28 Apr 2026 03:16:02Reported by [email protected]Type

Admin users can execute OS commands via DomainName DHCP parameter on Zyxel DX3301-T0 and EX3301-T0 firmware up to 5.50.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-1460	28 Apr 202602:06	–	attackerkb
Circl	CVE-2026-1460	12 May 202610:21	–	circl
CNNVD	Zyxel DX3301-T0和Zyxel EX3301-T0 操作系统命令注入漏洞	28 Apr 202600:00	–	cnnvd
CVE	CVE-2026-1460	28 Apr 202602:06	–	cve
Cvelist	CVE-2026-1460	28 Apr 202602:06	–	cvelist
EUVD	EUVD-2026-25970	28 Apr 202602:06	–	euvd
Positive Technologies	PT-2026-35646	28 Apr 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-1460	29 Apr 202606:18	–	redhatcve
Vulnrichment	CVE-2026-1460	28 Apr 202602:06	–	vulnrichment

NVD

Node

AND

zyxel nebula_fwa70_firmwareRange<1.51(acrf.0)v0

zyxel nebula_fwa70Match-

Node

AND

zyxel nebula_fwa505_firmwareRange<1.60(acko.3)v0

zyxel nebula_fwa505Match-

Node

AND

zyxel nebula_fwa510_firmwareRange<1.60(acgd.1)v0

zyxel nebula_fwa510Match-

Node

AND

zyxel nebula_fwa515_firmwareRange<1.60(acpz.1)v0

zyxel nebula_fwa515Match-

Node

AND

zyxel nebula_fwa710_firmwareRange<1.60(acgc.2)v0

zyxel nebula_fwa710Match-

Node

AND

zyxel nebula_lte3301-plus_firmwareRange<1.18(acca.7)v0

zyxel nebula_lte3301-plusMatch-

Node

AND

zyxel nebula_lte7461-m602_firmwareRange<1.15(acev.4)v0

zyxel nebula_lte7461-m602Match-

Node

AND

zyxel nebula_nr5101_firmwareRange<1.16(accg.1)v0

zyxel nebula_nr5101Match-

Node

AND

zyxel nebula_nr7101_firmwareRange<1.16(accc.2)v0

zyxel nebula_nr7101Match-

Node

AND

zyxel dx3300-t0_firmwareRange<5.50(abvy.7.2)c0

zyxel dx3300-t0Match-

Node

AND

zyxel dx3300-t1_firmwareRange<5.50(abvy.7.2)c0

zyxel dx3300-t1Match-

Node

AND

zyxel dx3301-t0_firmwareRange<5.50(abvy.7.2)c0

zyxel dx3301-t0Match-

Node

AND

zyxel dx5401-b1_firmwareRange<5.17(abyo.7.2)c0

zyxel dx5401-b1Match-

Node

AND

zyxel ee3301-00_firmwareRange<5.63(acmu.3.1)c0

zyxel ee3301-00Match-

Node

AND

zyxel ee5301-00_firmwareRange<5.63(acld.3.1)c0

zyxel ee5301-00Match-

Node

AND

zyxel ee6510-10_firmwareRange<5.19(acjq.4.2)c0

zyxel ee6510-10Match-

Node

AND

zyxel emg3525-t50b_firmwareRange<5.50(abpm.9.8)c0

zyxel emg3525-t50bMatch-

Node

AND

zyxel emg5523-t50b_firmwareRange<5.50(abpm.9.8)c0

zyxel emg5523-t50bMatch-

Node

AND

zyxel ex2210-t0_firmwareRange<5.50(acdi.2.5)c0

zyxel ex2210-t0Match-

Node

AND

zyxel ex3300-t0_firmwareRange<5.50(abvy.7.2)c0

zyxel ex3300-t0Match-

Node

AND

zyxel ex3300-t1_firmwareRange<5.50(abvy.7.2)c0

zyxel ex3300-t1Match-

Node

AND

zyxel ex3301-t0_firmwareRange<5.50(abvy.7.2)c0

zyxel ex3301-t0Match-

Node

AND

zyxel ex3500-t0_firmwareRange<5.44(achr.6)c0

zyxel ex3500-t0Match-

Node

AND

zyxel ex3501-t0_firmwareRange<5.44(achr.6)c0

zyxel ex3501-t0Match-

Node

AND

zyxel ex3600-t0_firmwareRange<5.70(acif.3)c0

zyxel ex3600-t0Match-

Node

AND

zyxel ex5401-b1_firmwareRange<5.17(abyo.7.2)c0

zyxel ex5401-b1Match-

Node

AND

zyxel ex5512-t0_firmwareRange<5.70(aceg.5.5)c0

zyxel ex5512-t0Match-

Node

AND

zyxel ex5601-t0_firmwareRange<5.70(acdz.6)c0

zyxel ex5601-t0Match-

Node

AND

zyxel ex5601-t1_firmwareRange<5.70(acdz.6)c0

zyxel ex5601-t1Match-

Node

AND

zyxel ex7501-b0_firmwareRange<5.18(achn.3.2)c0

zyxel ex7501-b0Match-

Node

AND

zyxel ex7710-b0_firmwareRange<5.18(acak.1.7)c0

zyxel ex7710-b0Match-

Node

AND

zyxel gm4100-b0_firmwareRange<5.18(accl.2.1)c0

zyxel gm4100-b0Match-

Node

AND

zyxel vmg3625-t50b_firmwareRange<5.50(abpm.9.8)c0

zyxel vmg3625-t50bMatch-

Node

AND

zyxel vmg4005-b50a_firmwareRange<5.17(abqa.3.3)c0

zyxel vmg4005-b50aMatch-

Node

AND

zyxel vmg4005-b60a_firmwareRange<5.17(abqa.3.3)c0

zyxel vmg4005-b60aMatch-

Node

AND

zyxel vmg8623-t50b_firmwareRange<5.50(abpm.9.8)c0

zyxel vmg8623-t50bMatch-

Node

AND

zyxel am7510-00_firmwareRange<5.63(acor.0.2)c0

zyxel am7510-00Match-

Node

AND

zyxel ax7501-b1_firmwareRange<5.17(abpc.7.2)c0

zyxel ax7501-b1Match-

Node

AND

zyxel pe3301-00_firmwareRange<5.63(acmt.3.1)c0

zyxel pe3301-00Match-

Node

AND

zyxel pe5301-01_firmwareRange<5.63(acoj.3.1)c0

zyxel pe5301-01Match-

Node

AND

zyxel px5301-t0_firmwareRange<5.44(ackb.0.7)c0

zyxel px5301-t0Match-

Node

AND

zyxel px5302-00_firmwareRange<5.44(acnm.0.1)c0

zyxel px5302-00Match-

Node

AND

zyxel we3300-00_firmwareRange<5.70(acka.2)c0

zyxel we3300-00Match-

Node

AND

zyxel we4600-00_firmwareRange<6.70(ackt.1)c0

zyxel we4600-00Match-

Node

AND

zyxel wx5600-t0_firmwareRange<5.70(aceb.6)c0

zyxel wx5600-t0Match-

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-and-wireless-extenders-04-28-2026

25 Jul 2026 11:10Current

CVSS 3.17.2

EPSS0.01157

CWE-78