CVE-2025-11730: OS Command Injection
A post‑authentication command injection vulnerability in the Dynamic DNS (DDNS) configuration CLI command in Zyxel ATP series firmware versions from V5.35 through V5.41, USG FLEX series firmware versions from V5.35 through V5.41, USG FLEX 50(W) series firmware versions from V5.35 through V5.41, and USG20(W)-VPN series firmware versions from V5.35 through V5.41 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on an affected device by supplying a specially crafted string as an argument to the CLI command.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11730?
CVE-2025-11730 has been rated as a critical severity vulnerability due to its potential impacts on system integrity and confidentiality.
How do I fix CVE-2025-11730?
To mitigate CVE-2025-11730, update the affected Zyxel firmware to the latest version provided by the vendor.
What products are affected by CVE-2025-11730?
CVE-2025-11730 affects Zyxel ATP series, USG FLEX series, USG FLEX 50(W) series, and USG20(W)-VPN series firmware versions from V5.35 to V5.41.
What type of vulnerability is CVE-2025-11730?
CVE-2025-11730 is a post-authentication command injection vulnerability, allowing attackers to execute arbitrary commands.
Is there a known exploit for CVE-2025-11730?
While there are no public exploits known at this moment, the nature of the vulnerability makes it critical to apply patches immediately.