CVE-2026-6837

CVE-2026-6837 affects Zyxel WAX650S devices, via a post-authentication command injection in the export-cgi CGI program. The flaw is exploitable by an authenticated administrator, enabling OS command execution on the device. Affected firmware versions go through 7.10(ABRM.4)C0. The CVSS 3.1 vector...

CVE-2026-6837

A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10ABRM.4C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device...

CVE-2025-6265

A path traversal vulnerability in the fileupload-cgi CGI program of Zyxel NWA50AX PRO firmware version 7.10ACGE.2 and earlier could allow an authenticated attacker with administrator privileges to access specific directories and delete files, such as the configuration file, on the affected device...