CVE-2026-0711: OS Command Injection
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0711?
CVE-2026-0711 is classified as a high severity vulnerability due to its potential for exploitation by privileged attackers.
How do I fix CVE-2026-0711?
To mitigate CVE-2026-0711, update the Zyxel DX3300-T0 firmware to the latest version beyond 5.50(ABVY.7.1)C0.
Who is affected by CVE-2026-0711?
CVE-2026-0711 affects users of the Zyxel DX3300-T0 firmware versions up to 5.50(ABVY.7.1)C0 with administrator access.
What type of attack can exploit CVE-2026-0711?
CVE-2026-0711 can be exploited through post-authentication command injection attacks by authenticated attackers.
What are the potential impacts of CVE-2026-0711?
The impacts of CVE-2026-0711 include unauthorized command execution on the affected device, compromising system integrity.