Zyxel vulnerabilities12 known to be exploited.
Zyxel has 306 published vulnerabilities across 878 products in our catalogue. 12 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Usg Flex 500, with 54. If you run Zyxel software, patch the exploited flaws first.
The most recent Zyxel flaw added to the known-exploited list is CVE-2024-40891, on 11 February 2025. We keep watching the known-exploited list.
Which Zyxel products have the most vulnerabilities?
Usg Flex 500 leads with 54 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Zyxel vulnerabilities are being exploited?
12 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.8Zyxel DSL CPE OS Command Injection Vulnerability
Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the management commands that could allow an authenticated attacker to execute OS commands via Telnet.
- 8.8Zyxel DSL CPE OS Command Injection Vulnerability
Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the CGI program that could allow an authenticated attacker to execute OS commands via a crafted HTTP request.
- 7.5Zyxel Multiple Firewalls Path Traversal Vulnerability
Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an attacker to download or upload files via a crafted URL.
- 8.8Zyxel EMG2926 Routers Command Injection Vulnerability
Zyxel EMG2926 routers contain a command injection vulnerability located in the diagnostic tools, specifically the nslookup function.
- 9.8Zyxel P660HN-T1A Routers Command Injection Vulnerability
Zyxel P660HN-T1A routers contain a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user and exploited via the remote_host parameter of the...
- 9.8Zyxel Multiple NAS Devices Command Injection Vulnerability
Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an unauthenticated attacker to execute commands remotely via a crafted HTTP request.
- 9.8Zyxel Multiple Firewalls Buffer Overflow Vulnerability
Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the notification function that could allow an unauthenticated attacker to cause...
- 9.8Zyxel Multiple Firewalls Buffer Overflow Vulnerability
Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the ID processing function that could allow an unauthenticated attacker to cause...
Which Zyxel flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute...
- >99%
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions...
- >99%
Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series...
- 95%CVE-2022-0342Critical
An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through...
- 94%
The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an...
- 90%
Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password.
- 89%CVE-2024-29972Critical
** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0...
- 86%CVE-2024-29973Critical
** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could...
- 83%
The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions prior to...
- 71%CVE-2021-4039Critical
A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device.
All Zyxel products we track.
347 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Cloudcnm Secumanagercloudcnm_secumanager35 vulnerabilities2 versions
- Gs1900-10hp Firmwaregs1900-10hp_firmware35 vulnerabilities11 versions
- Usg Flex 100w Firmwareusg_flex_100w_firmware34 vulnerabilities10 versions
- Usg Flex 200 Firmwareusg_flex_200_firmware34 vulnerabilities10 versions
- Usg Flex 500 Firmwareusg_flex_500_firmware34 vulnerabilities11 versions
- Usg Flex 700 Firmwareusg_flex_700_firmware34 vulnerabilities9 versions
- Usg Flex 100 Firmwareusg_flex_100_firmware30 vulnerabilities10 versions
- Usg Flex 50w Firmwareusg_flex_50w_firmware26 vulnerabilities10 versions
- Atp200 Firmwareatp200_firmware25 vulnerabilities11 versions
- Atp500 Firmwareatp500_firmware25 vulnerabilities11 versions
- Atp800 Firmwareatp800_firmware25 vulnerabilities11 versions
- Atp100 Firmwareatp100_firmware24 vulnerabilities12 versions
- Nas326 Firmwarenas326_firmware24 vulnerabilities9 versions
- Vpn100 Firmwarevpn100_firmware24 vulnerabilities8 versions
- Vpn300 Firmwarevpn300_firmware24 vulnerabilities8 versions
- Vpn50 Firmwarevpn50_firmware24 vulnerabilities8 versions
- Atp100w Firmwareatp100w_firmware23 vulnerabilities8 versions
- Atp700 Firmwareatp700_firmware23 vulnerabilities8 versions
- Usg Flex 50 Firmwareusg_flex_50_firmware23 vulnerabilities8 versions
- Vpn1000 Firmwarevpn1000_firmware23 vulnerabilities8 versions
- Zldzld21 vulnerabilities15 versions
- Usg 20w-VPN Firmwareusg_20w-vpn_firmware19 vulnerabilities5 versions
- Nas542 Firmwarenas542_firmware18 vulnerabilities8 versions
- Dx5401-B0 Firmwaredx5401-b0_firmware17 vulnerabilities5 versions
This directory lists the 347 Zyxel products with at least one tracked version, of 878 in our catalogue.
Running Zyxel? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the management commands that could allow an authenticated attacker to execute OS commands via Telnet.
- Matched to
- Vmg4325-B10a Firmware on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 306 published vulnerabilities across 878 products and 1,329 versions from Zyxel. The most recent Zyxel flaw added to the known-exploited list is CVE-2024-40891, on 11 February 2025.
12 Zyxel vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2024-40891, CVE-2024-40890 and CVE-2024-11667. The full list is on this page.
Usg Flex 500, with 54 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Zyxel products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.