CVE-2025-11846: Null Pointer Dereference
Published Feb 24, 2026
·Updated
A null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.6)C0 and the Zyxel WX3100-T0 firmware versions through 5.50(ABVL.4.8)C0 could allow an authenticated attacker with administrator privileges to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request.
Affected Software
112 affected components
Zyxel VMG3625-T50B firmware<=5.50(ABPM.9.6)C0
Zyxel WX3100-T0 firmware<=5.50(ABVL.4.8)C0
All of the following
Zyxel Lte3301-plus Firmware<1.00\(abqu.9\)c0
Zyxel Lte3301-plus
All of the following
Zyxel Nebula Fwa505 Firmware<1.60\(acko.2\)v0
Zyxel Nebula Fwa505
All of the following
Zyxel Nebula Fwa510 Firmware<1.60\(acgd.0\)c0
Zyxel Nebula Fwa510
All of the following
Zyxel Nebula Fwa515 Firmware<1.60\(acpz.0\)v0
Zyxel Nebula Fwa515
All of the following
Zyxel Nebula Fwa710 Firmware<1.60\(acgc.1\)v0
Zyxel Nebula Fwa710
All of the following
Zyxel Ee5301-00 Firmware<5.63\(acld.2.1\)c0
Zyxel Ee5301-00
All of the following
Zyxel Ee3301-00 Firmware<5.63\(acmu.2.1\)c0
Zyxel Ee3301-00
All of the following
Zyxel Dx5401-b1 Firmware<5.17\(abyo.7.1\)c0
Zyxel Dx5401-b1
All of the following
Zyxel Dx4510-b1 Firmware<5.17\(abyl.10.1\)c0
Zyxel Dx4510-b1
All of the following
Zyxel Dx4510-b0 Firmware<5.17\(abyl.10.1\)c0
Zyxel Dx4510-b0
All of the following
Zyxel DX3301-T0 firmware<5.50\(abvy.7.1\)c0
Zyxel DX3301-T0
All of the following
Zyxel Dx3300-t1 Firmware<5.50\(abvy.7.1\)c0
Zyxel Dx3300-t1
All of the following
Zyxel DX3300-T0 firmware<5.50\(abvy.7.1\)c0
Zyxel DX3300-T0
All of the following
Zyxel Ee6510-10 Firmware<5.19\(acjq.4.1\)c0
Zyxel Ee6510-10
All of the following
Zyxel Emg3525-t50b Firmware<5.50\(abpm.9.7\)c0
Zyxel Emg3525-t50b
All of the following
Zyxel Nebula Lte3301-plus Firmware<1.18\(acca.6\)v0
Zyxel Nebula Lte3301-plus
All of the following
Zyxel Emg5523-t50b Firmware<5.50\(abpm.9.7\)c0
Zyxel Emg5523-t50b
All of the following
Zyxel Ex2210-t0 Firmware<5.50\(acdi.2.3\)c0
Zyxel Ex2210-t0
All of the following
Zyxel Ex3300-t0 Firmware<5.50\(abvy.7.1\)c0
Zyxel Ex3300-t0
All of the following
Zyxel Ex3300-t1 Firmware<5.50\(abvy.7.1\)c0
Zyxel Ex3300-t1
All of the following
Zyxel EX3301-T0 firmware<5.50\(abvy.7.1\)c0
Zyxel EX3301-T0
All of the following
Zyxel Ex3500-t0 Firmware<5.44\(achr.5.1\)c0
Zyxel Ex3500-t0
All of the following
Zyxel Ex3501-t0 Firmware<5.44\(achr.5.1\)c0
Zyxel Ex3501-t0
All of the following
Zyxel EX3510-B0 firmware<5.17\(abup.15.2\)c0
Zyxel EX3510-B0
All of the following
Zyxel Ex3510-b1 Firmware<5.17\(abup.15.2\)c0
Zyxel Ex3510-b1
All of the following
Zyxel Ex3600-t0 Firmware<5.70\(acif.2.1\)c0
Zyxel Ex3600-t0
All of the following
Zyxel Ex5401-b1 Firmware<5.17\(abyo.7.1\)c0
Zyxel Ex5401-b1
All of the following
Zyxel Ex5510-b0 Firmware<5.17\(abqx.11.1\)c0
Zyxel Ex5510-b0
All of the following
Zyxel Ex5512-t0 Firmware<5.70\(aceg.5.3\)c0
Zyxel Ex5512-t0
All of the following
Zyxel Ex5601-t0 Firmware<5.70\(acdz.5.1\)c0
Zyxel Ex5601-t0
All of the following
Zyxel EX5601-T1 firmware<5.70\(acdz.5.1\)c0
Zyxel EX5601-T1
All of the following
Zyxel Ex7501-b0 Firmware<5.18\(achn.3.1\)c0
Zyxel Ex7501-b0
All of the following
Zyxel Ex7710-b0 Firmware<5.18\(acak.1.6\)c0
Zyxel Ex7710-b0
All of the following
Zyxel Gm4100-b0 Firmware<5.18\(accl.2\)c0
Zyxel Gm4100-b0
All of the following
Zyxel Pm7500-00 Firmware<5.61\(ackk.1.2\)c0
Zyxel Pm7500-00
All of the following
Zyxel VMG3625-T50B firmware<5.50\(abpm.9.7\)c0
Zyxel VMG3625-T50B
All of the following
Zyxel VMG4005-B50A firmware<5.17\(abqa.3.2\)c0
Zyxel VMG4005-B50A
All of the following
Zyxel Vmg4005-b60a Firmware<5.17\(abqa.3.2\)c0
Zyxel Vmg4005-b60a
All of the following
Zyxel AX7501-B1 firmware<5.17\(abpc.7.1\)c0
Zyxel AX7501-B1
All of the following
Zyxel Pe3301-00 Firmware<5.63\(acmt.2.1\)c0
Zyxel Pe3301-00
All of the following
Zyxel Pe5301-01 Firmware<5.63\(acoj.2.1\)c0
Zyxel Pe5301-01
All of the following
Zyxel Pm3100-t0 Firmware<5.42\(acbf.4.1\)c0
Zyxel Pm3100-t0
All of the following
Zyxel Pm5100-t0 Firmware<5.42\(acbf.4.1\)c0
Zyxel Pm5100-t0
All of the following
Zyxel Pm5100-t1 Firmware<5.42\(acbf.4.1\)c0
Zyxel Pm5100-t1
All of the following
Zyxel Pm7300-t0 Firmware<5.42\(abyy.4.1\)c0
Zyxel Pm7300-t0
All of the following
Zyxel Px3321-t1 Firmware<5.44\(achk.3\)c0
Zyxel Px3321-t1
All of the following
Zyxel Px3321-t1 Firmware<5.44\(acjb.1.5\)c0
Zyxel Px3321-t1
All of the following
Zyxel Px5301-t0 Firmware<5.44\(ackb.0.6\)c0
Zyxel Px5301-t0
All of the following
Zyxel Scr 50axe Firmware<1.30\(acgn.0\)c0
Zyxel Scr 50axe
All of the following
Zyxel Vmg8623-t50b Firmware<5.50\(abpm.9.7\)c0
Zyxel Vmg8623-t50b
All of the following
Zyxel We3300-00 Firmware<5.70\(acka.1.1\)c0
Zyxel We3300-00
All of the following
Zyxel WX3100-T0 firmware<5.50\(abvl.4.9\)c0
Zyxel WX3100-T0
All of the following
Zyxel Wx3401-b1 Firmware<5.17\(abve.2.10\)c0
Zyxel Wx3401-b1
All of the following
Zyxel Wx5600-t0 Firmware<5.70\(aceb.5.1\)c0
Zyxel Wx5600-t0
All of the following
Zyxel Wx5610-b0 Firmware<5.18\(acgj.0.5\)c0
Zyxel Wx5610-b0
Event History
Feb 24, 2026
CVE Published
via MITRE·01:37 AM
Data Sourced
via MITRE·01:37 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-11846?
CVE-2025-11846 has a high severity rating as it allows authenticated attackers with administrator privileges to trigger a denial of service.
2
How do I fix CVE-2025-11846?
To fix CVE-2025-11846, update to the latest firmware version provided by Zyxel that addresses this vulnerability.
3
What products are affected by CVE-2025-11846?
CVE-2025-11846 affects several Zyxel products including the VMG3625-T50B and WX3100-T0 firmware versions up to specified versions.
4
Who can exploit CVE-2025-11846?
Only authenticated users with administrator privileges can exploit the vulnerability described in CVE-2025-11846.
5
What type of vulnerability is CVE-2025-11846?
CVE-2025-11846 is classified as a null pointer dereference vulnerability.