Lucene search
+L

14 matches found

Kitploit
Kitploit
added 2026/09/10 11:46 a.m.5 views

zyxel-wax650s-research-notebook-public

Cuaderno de Investigación Zyxel WAX650S Cuaderno de investigación de acceso público para el firmware Zyxel WAX650S V7.10ABRM.4C0. Este repositorio está escrito como una wiki en formato narrativo para investigadores y futuros trabajos de seguimiento asistidos por LLM. Documenta cómo se levantó el...

5.9AI score
SaveExploits0References18
GithubExploit
GithubExploit
added 2026/08/16 4:03 p.m.24 views

Exploit for CVE-2026-6837

CVE-2026-6837: Zyxel export-cgi PKCS12 Command Injection T...

7.2CVSS5.5AI score0.01173EPSS
SaveExploits1
NVD
NVD
added 2026/08/04 3:16 a.m.11 views

CVE-2026-8508

An improper authentication vulnerability in the "sociallogin.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10ABRM.4C0 could allow an attacker on the WLAN to bypass captive portal authentication...

6.5CVSS0.007EPSS
SaveExploits1References1
NVD
NVD
added 2026/08/04 3:16 a.m.14 views

CVE-2026-6837

A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10ABRM.4C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device...

7.2CVSS0.01173EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/08/04 1:57 a.m.9 views

CVE-2026-8508

An improper authentication vulnerability in the "sociallogin.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10ABRM.4C0 could allow an attacker on the WLAN to bypass captive portal authentication...

6.5CVSS5.5AI score0.007EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/08/04 1:57 a.m.57 views

CVE-2026-8508

An improper authentication vulnerability in the "sociallogin.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10ABRM.4C0 could allow an attacker on the WLAN to bypass captive portal authentication...

6.5CVSS0.007EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/08/04 1:57 a.m.10 views

CVE-2026-8508

An improper authentication vulnerability in the "sociallogin.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10ABRM.4C0 could allow an attacker on the WLAN to bypass captive portal authentication...

6.5CVSS5.5AI score0.007EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
added 2026/08/04 1:57 a.m.16 views

EUVD-2026-52567

An improper authentication vulnerability in the "sociallogin.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10ABRM.4C0 could allow an attacker on the WLAN to bypass captive portal authentication...

6.5CVSS5.5AI score0.007EPSS
SaveExploits1References1
CVE
CVE
added 2026/08/04 1:52 a.m.114 views

CVE-2026-6837

CVE-2026-6837 affects Zyxel WAX650S devices, via a post-authentication command injection in the export-cgi CGI program. The flaw is exploitable by an authenticated administrator, enabling OS command execution on the device. Affected firmware versions go through 7.10(ABRM.4)C0. The CVSS 3.1 vector...

7.2CVSS5.8AI score0.01173EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/08/04 1:52 a.m.14 views

CVE-2026-6837

A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10ABRM.4C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device...

7.2CVSS5.8AI score0.01173EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/08/04 1:52 a.m.11 views

CVE-2026-6837

A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10ABRM.4C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device...

7.2CVSS5.8AI score0.01173EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
added 2026/08/04 1:52 a.m.18 views

EUVD-2026-52566

A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10ABRM.4C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device...

7.2CVSS5.8AI score0.01173EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/08/04 12:00 a.m.29 views

PT-2026-67634

Name of the Vulnerable Software and Affected Versions Zyxel WAX650S versions prior to 7.10ABRM.4C0 Description An improper authentication issue exists in the "social login.cgi" CGI program. This flaw allows an attacker connected to the WLAN to bypass captive portal authentication. Recommendations...

6.5CVSS6.4AI score0.007EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2026/08/03 12:00 a.m.27 views

PT-2026-67633

Name of the Vulnerable Software and Affected Versions Zyxel WAX650S versions prior to 7.10ABRM.4C0 Description A post-authentication command injection issue exists in the "export-cgi" CGI program. This allows an authenticated attacker with administrator privileges to execute arbitrary operating...

9CVSS5.7AI score0.01173EPSS
SaveExploits1References16
Rows per page
Query Builder