CVE-2026-6058: Medium severity Zyxel WRE6505 v2 firmware vulnerability

Published Apr 21, 2026

Updated

UNSUPPORTED WHEN ASSIGNED An improper encoding or escaping vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the WLAN to cause a denial-of-service (DoS) condition in the web management interface by convincing an authenticated administrator to visit the “AP Select” page while a malformed SSID is present.

Affected Software

3 affected components

Zyxel WRE6505 v2 firmware=V1.00(ABDV.3)C0

All of the following

Zyxel Wre6505 Firmware=v1.00\(abdv.3\)c0

Zyxel WRE6505=v2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Zyxel WRE6505 v2 firmware to a version that resolves this vulnerability.
Fixed in V1.00(ABDV.3)C0

Event History

Apr 21, 2026

CVE Published

via MITRE·01:42 AM

Data Sourced

via MITRE·01:42 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:16 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-6058?

The severity of CVE-2026-6058 is rated as high due to its potential to cause a denial-of-service condition.

How do I fix CVE-2026-6058?

To fix CVE-2026-6058, update the Zyxel WRE6505 v2 firmware to a patched version if available.

What systems are affected by CVE-2026-6058?

CVE-2026-6058 affects the Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0.

Can CVE-2026-6058 be exploited remotely?

CVE-2026-6058 requires an adjacent attacker on the WLAN to exploit the vulnerability.

What type of vulnerability is CVE-2026-6058?

CVE-2026-6058 is categorized as an improper encoding or escaping vulnerability.