zyxel

Security Risk Profile

/100

medium

Security Risk Score

Comprehensive risk assessment based on 367 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from August 14, 2001 to present

367

Total CVEs

211

Critical+High

Exploited

186

Unpatched

Threat Assessment

Avg CVSS

7.4

Base severity

Avg EPSS

Exploit probability

Unpatched

186

Critical/High

Risk Level

57/100

medium

⚠️ 7 Active Exploits⚡ 10 Zero-Days🆕 4Fresh (<7d)📈 5 in Last 30 Days

Severity Distribution

Critical

High

138

Medium

136

Low

Exploit Likelihood

>50% chance

20-50%

5-20%

<5%

Age Distribution

Common Weaknesses (CWE)

OS Command Injection

Command Injection

Buffer Overflow

XSS

CSRF

Most Affected Products

1. Cisco IOS XE224

2. Zyxel Access Points Firmware154

3. Zyxel ZLD104

4. Zyxel Cloud CNM SecuManager70

5. Zyxel ZyNOS63

Recent Vulnerabilities

See more →

https://reddit.com/r/sysadmin/comments/1xr624u/patched_zyxel_gs1900_switches_remain_open_to_an/

unknown

Patched Zyxel GS1900 switches remain open to an exploited flaw, Binarly finds

Nov 8, 2026🔧 No Patch

https://reddit.com/r/sysadmin/comments/1xoeijh/zyxels_june_fix_for_an_exploited_gs1900_switch/

unknown

Zyxel's June fix for an exploited GS1900 switch flaw didn't stop the exploit, Binarly says: 996 switches hit, new firmware October 22, advisory November 3

Nov 5, 2026🔧 No Patch

CVE-2026-76955

CVSS 8.8high

Nov 3, 2026🔧 No Patch

CVE-2026-107441

CVSS 8.8high

Nov 3, 2026🔧 No Patch

CVE-2026-12489

CVSS 6.5medium

Oct 20, 2026🔧 No Patch

https://reddit.com/r/cybersecurity/comments/1wntbnz/cisa_just_added_cve20267273_affecting_zyxel/

unknown

CISA just added CVE-2026-7273 affecting Zyxel GS1900 switches to its KEV catalog.

Sep 23, 2026🔧 No Patch

https://reddit.com/r/cybersecurity/comments/1vxzfia/cve20268508_captiveportal_sociallogin_bypass/

unknown

CVE-2026-8508: Captive-Portal Social-Login Bypass Affecting 39 Zyxel Access Point Models with full firmware emulation guide

Aug 25, 2026🔧 No Patch

https://reddit.com/r/netsec/comments/1vq55y4/cve20266837_command_injection_in_zyxel_exportcgi/

unknown

CVE-2026-6837: Command Injection in Zyxel export-cgi PKCS#12 Export Handling

Aug 16, 2026🔧 No Patch

https://reddit.com/r/cybersecurity/comments/1vq55rw/cve20266837_root_command_injection_affecting_18/

unknown

CVE-2026-6837: Root Command Injection Affecting 18 Zyxel Access Point Models

Aug 16, 2026🔧 No Patch

CVE-2026-12984

CVSS 8.2high

Exposure of Sensitive Information to an Unauthorized Actor in Zyxel's WAH7601

Aug 10, 2026🔧 No Patch

Monitor zyxel in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Start Free Trial Book a Demo

zyxel

Security Risk Score

Threat Assessment

Severity Distribution

Exploit Likelihood

Age Distribution

Common Weaknesses (CWE)

Most Affected Products

Recent Vulnerabilities

Monitor zyxel in Real-Time

Monitor Your Software Stack in Real-Time