[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDtr8iMAdDY4892c_3Zef2lqV98psUXlzC6nYVNxUN5E":3,"g5a-family:zyxel\u002Fzld":142,"g5a-ex:zyxel\u002Fzld@*":143},{"success":4,"data":5},true,{"product":6,"versions":47,"topVulnerabilitiesByEpss":63,"kevVulnerabilities":114,"seoMetadata":120,"meta":139},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":46},"zyxel","zld",15,21,1,"2025-10-21",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"4.16",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"4.20",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"4.30",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"4.32",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"4.39",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"4.50",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"4.55",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"4.60",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"5.00",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"5.10",{"version":37,"cve_count":11,"kev_count":16,"has_kev":17},"5.37",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"5.38",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"5.39",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"5.40",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"5.41","Zld by Zyxel is a technology product with 15 tracked versions and 21 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[48,49,50,51,52,53,54,55,56,57,58,59,60,61,62],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":11,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},[64,71,78,84,90,94,99,102,105,109],{"cveId":65,"description":66,"publishedDate":12,"cvssScore":67,"cvssVersion":68,"severity":69,"isKev":17,"epssScore":70},"CVE-2025-9133","A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware versions from V4.16 through V5.40, and USG20(W)-VPN series firmware versions from V4.16 through V5.40 could allow a semi-authenticated attacker—who has completed only the first stage of the two-factor authentication (2FA) process—to view and download the system configuration from an affected device.",8.1,"v3.1","High",0.0546,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":68,"severity":76,"isKev":17,"epssScore":77},"CVE-2020-25014","A stack-based buffer overflow in fbwifi_continue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet.","2020-11-27",9.8,"Critical",0.0444,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":68,"severity":69,"isKev":4,"epssScore":83},"CVE-2024-11667","A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL.","2024-11-27",7.5,0.02929,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"cvssVersion":68,"severity":69,"isKev":17,"epssScore":89},"CVE-2020-29299","Certain Zyxel products allow command injection by an admin via an input string to chg_exp_pwd during a password-change action. This affects VPN On-premise before ZLD V4.39 week38, VPN Orchestrator before SD-OS V10.03 week32, USG before ZLD V4.39 week38, USG FLEX before ZLD V4.55 week38, ATP before ZLD V4.55 week38, and NSG before 1.33 patch 4.","2020-12-27",7.2,0.02372,{"cveId":91,"description":92,"publishedDate":12,"cvssScore":88,"cvssVersion":68,"severity":69,"isKev":17,"epssScore":93},"CVE-2025-8078","A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware versions from V4.16 through V5.40, and USG20(W)-VPN series firmware versions from V4.16 through V5.40 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on the affected device by passing a crafted string as an argument to a CLI command.",0.01446,{"cveId":95,"description":96,"publishedDate":97,"cvssScore":88,"cvssVersion":68,"severity":69,"isKev":17,"epssScore":98},"CVE-2024-42059","A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware versions from V5.00 through V5.38, USG FLEX 50(W) series firmware versions from V5.00 through V5.38, and USG20(W)-VPN series firmware versions from V5.00 through V5.38 could allow an authenticated attacker with administrator privileges to execute some OS commands on an affected device by uploading a crafted compressed language file via FTP.","2024-09-03",0.01339,{"cveId":100,"description":101,"publishedDate":97,"cvssScore":88,"cvssVersion":68,"severity":69,"isKev":17,"epssScore":98},"CVE-2024-42060","A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an authenticated attacker with administrator privileges to execute some OS commands on an affected device by uploading a crafted internal user agreement file to the vulnerable device.",{"cveId":103,"description":104,"publishedDate":97,"cvssScore":88,"cvssVersion":68,"severity":69,"isKev":17,"epssScore":98},"CVE-2024-7203","A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38 could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device by executing a crafted CLI command.",{"cveId":106,"description":107,"publishedDate":97,"cvssScore":67,"cvssVersion":68,"severity":69,"isKev":17,"epssScore":108},"CVE-2024-42057","A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an unauthenticated attacker to execute some OS commands on an affected device by sending a crafted username to the vulnerable device. Note that this attack could be successful only if the device was configured in User-Based-PSK authentication mode and a valid user with a long username exceeding 28 characters exists.",0.0132,{"cveId":110,"description":111,"publishedDate":112,"cvssScore":82,"cvssVersion":68,"severity":69,"isKev":17,"epssScore":113},"CVE-2023-4398","An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, and VPN series firmware versions 4.30 through 5.37, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions on an affected device by sending a crafted IKE packet.","2023-11-28",0.00881,[115],{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"severity":69,"isKev":4,"epssScore":83,"cisaVulnName":116,"cisaDateAdded":117,"cisaShortDescription":118,"cisaRequiredAction":119},"Zyxel Multiple Firewalls Path Traversal Vulnerability","2024-12-03","Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an attacker to download or upload files via a crafted URL.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":121,"metaDescription":122,"keywords":123,"structuredData":124},"Zld by Zyxel - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Zld by Zyxel covering 15 versions with 21 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Zld vulnerabilities, Zld security, Zld CVE, Zyxel Zld, Zld threat intelligence, Zyxel security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Zld KEV, Zld exploited vulnerabilities",{"@context":125,"@type":126,"name":127,"description":122,"url":128,"manufacturer":129,"applicationCategory":133,"softwareVersion":134,"mainEntity":135},"https:\u002F\u002Fschema.org","SoftwareApplication","Zld","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fzyxel\u002Fzld",{"@type":130,"name":131,"url":132},"Organization","Zyxel","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fzyxel","Security Software","15 versions tracked",{"@type":136,"name":137,"description":138,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Zld Security Vulnerabilities","Security vulnerabilities affecting Zld by Zyxel",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":140,"apiVersion":141},"2026-10-18T19:40:01.115Z","3.0",[],{"rows":144,"total":11,"capped":17,"failed":16},[145],{"cveId":79,"name":116,"severity":69,"cvss":82,"added":117,"epss":83,"published":146,"ranges":147,"checked":4,"hits":149,"covers":17},"2024-11-27T10:15:04.21",[148],"5.00 to 5.38",[]]