CVE-2026-76955: Buffer Overflow
Published Nov 3, 2026
·Updated
A buffer overflow vulnerability in the zdpwtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could allow a LAN-based attacker to escalate privileges on an affected device.
Event History
Nov 3, 2026
CVE Published
via MITRE·01:54 AM
Data Sourced
via MITRE·01:54 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which devices are exposed to this issue?
Devices running affected Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 are exposed. The vulnerable component is the zdp_wtp binary.
2
What access does an attacker need?
An attacker must be able to reach the device from the LAN. No privileges or user interaction are required according to the provided CVSS vector.
3
What could successful exploitation allow?
Successful exploitation could allow a LAN-based attacker to escalate privileges on the affected device. The reported impact includes high confidentiality, integrity, and availability impact.