Zyxel: exploited vulnerabilities
- 13exploited vulnerabilities
- 2used by ransomware
- Sep 21, 2026latest one added
- Multiple Firewalls 5
- DSL CPE Devices 2
- Multiple Network-Attached Storage (NAS) Devices 2
- GS1900 Series Switches 1
- EMG2926 Routers 1
- P660HN-T1A Routers 1
- Multiple Products 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 21, 2026 | Stack-Based Buffer Overflow | GS1900 Series Switches | High 8.8 | 2.8% |
| Feb 11, 2025 | DSL CPE OS Command Injection | DSL CPE Devices | High 8.8 | 23% |
| Feb 11, 2025 | DSL CPE OS Command Injection | DSL CPE Devices | High 8.8 | 21% |
| Dec 3, 2024 | Path Traversal | Multiple Firewalls | High 7.5 | 2.9% |
| Sep 18, 2023 | Command Injection | EMG2926 Routers | High 8.8 | 33% |
| Aug 7, 2023 | Command Injection | P660HN-T1A Routers | Critical 9.8 | 95% |
| Jun 23, 2023 | Multiple NAS Devices Command Injection | Multiple Network-Attached Storage (NAS) Devices | Critical 9.8 | 82% |
| Jun 5, 2023 | Buffer Overflow | Multiple Firewalls | Critical 9.8 | 29% |
| Jun 5, 2023 | Buffer Overflow | Multiple Firewalls | Critical 9.8 | 28% |
| May 31, 2023 | OS Command Injection | Multiple Firewalls | Critical 9.8 | 99.3% |
| May 16, 2022 | OS Command Injection | Multiple Firewalls | Critical 9.8 | 99.9% |
| Mar 25, 2022 | Multiple NAS Devices OS Command Injection | Multiple Network-Attached Storage (NAS) Devices | Critical 9.8 | >99.9% |
| Nov 3, 2021 | Use of Hard-Coded Credentials | Multiple Products | Critical 9.8 | 90% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.