https://reddit.com/r/cybersecurity/comments/1vxzfia/cve20268508_captiveportal_sociallogin_bypass/: CVE-2026-8508: Captive-Portal Social-Login Bypass Affecting 39 Zyxel Access Point Models with full firmware emulation guide

Published Aug 25, 2026

Updated

Affected Software

1 affected component

Zyxel Access Point (Captive-Portal Social-Login flow)

Zyxel's advisory expanded the scope to 39 models, including access points, FWA7 units, and a security router.

The analysis was based on the WAX650S. The broader 39-model scope was identified in Zyxel's advisory.

The technical write-up includes a reproduction environment and a full firmware emulation guide.