https://reddit.com/r/cybersecurity/comments/1vxzfia/cve20268508_captiveportal_sociallogin_bypass/: CVE-2026-8508: Captive-Portal Social-Login Bypass Affecting 39 Zyxel Access Point Models with full firmware emulation guide
Published Aug 25, 2026
·Updated
Affected Software
1 affected component
Zyxel Access Point (Captive-Portal Social-Login flow)
Frequently Asked Questions
1
Which types of Zyxel devices are included in the affected scope?
Zyxel's advisory expanded the scope to 39 models, including access points, FWA7 units, and a security router.
2
Was the technical analysis performed across all affected models?
The analysis was based on the WAX650S. The broader 39-model scope was identified in Zyxel's advisory.
3
Is there a way to reproduce or validate the issue in a test environment?
The technical write-up includes a reproduction environment and a full firmware emulation guide.