87 matches found
CVE-2026-12489
An incorrect authorization vulnerability in the Data Access Layer DAL of Zyxel EX3501-T0 firmware versions through 5.44ACHR.6C0 could allow an authenticated attacker to escalate privileges by modifying the loginprivilege data on an affected device...
CVE-2026-12489
The Zyxel EX3501-T0 device is vulnerable to an incorrect authorization vulnerability within its Data Access Layer (DAL) in firmware versions up to and including 5.44(ACHR.6)C0 . An authenticated attacker can exploit this flaw to escalate privileges by modifying the login_privilege data on the aff...
CVE-2026-12489
An incorrect authorization vulnerability in the Data Access Layer DAL of Zyxel EX3501-T0 firmware versions through 5.44ACHR.6C0 could allow an authenticated attacker to escalate privileges by modifying the loginprivilege data on an affected device...
CVE-2026-12489
An incorrect authorization vulnerability in the Data Access Layer DAL of Zyxel EX3501-T0 firmware versions through 5.44ACHR.6C0 could allow an authenticated attacker to escalate privileges by modifying the loginprivilege data on an affected device...
EUVD-2026-104789
An incorrect authorization vulnerability in the Data Access Layer DAL of Zyxel EX3501-T0 firmware versions through 5.44ACHR.6C0 could allow an authenticated attacker to escalate privileges by modifying the loginprivilege data on an affected device...
PT-2026-118100
Name of the Vulnerable Software and Affected Versions Zyxel EX3501-T0 versions through 5.44ACHR.6C0 Description An incorrect authorization issue exists in the Data Access Layer DAL of the device. This flaw allows an authenticated attacker to escalate privileges by modifying the login privilege...
Zyxel EX3501-T0 firmware authorization issue vulnerability
The Zyxel EX3501-T0 firmware version 5.44ACHR.6C0 and earlier have an authorization issue vulnerability. This vulnerability stems from improper authorization in the Data Access Layer DAL, which may allow authenticated attackers to elevate their privileges by modifying the loginprivilege data...
CVE-2026-0711
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...
CVE-2026-1460
A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected...
CVE-2026-0711
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...
CVE-2026-1460
A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected...
EUVD-2026-25970
A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected...
CVE-2026-1460
CVE-2026-1460 affects Zyxel DX3301-T0 and EX3301-T0 devices up to firmware 5.50(ABVY.7.1)C0. A post-authentication command-injection vulnerability exists in the DHCP configuration file’s DomainName parameter. An authenticated attacker with administrator privileges could execute OS commands on an ...
CVE-2026-1460
A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected...
EUVD-2026-25968
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...
CVE-2026-0711
The CVE-2026-0711 issue affects Zyxel DX3300-T0 devices with firmware up to 5.50(ABVY.7.1)C0, where a post-authentication command injection exists in the EasyMesh-related APIs. An authenticated, adjacent attacker with administrator privileges can execute OS commands on the device, enabling high i...
CVE-2026-0711
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...
CVE-2026-0711
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...
Zyxel DX3301-T0 and Zyxel EX3301-T0 have operating system command injection vulnerabilities
Both the Zyxel DX3301-T0 and Zyxel EX3301-T0 are products of the Chinese company Zyxel. The Zyxel DX3301-T0 is a small wireless WiFi router. The Zyxel EX3301-T0 is a secure routing gateway. Both the Zyxel DX3301-T0 and Zyxel EX3301-T0, including versions 5.50ABVY.7.1C0 and earlier, have an...
PT-2026-35645
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...