Post-authentication command injection in Zyxel DSL/Ethernet CPE, Fiber ONTs, and Wireless Extenders

72% confidence

Description

A post-authentication command injection vulnerability exists in certain Zyxel DSL/Ethernet CPE, Fiber ONTs, and Wireless Extenders that could allow an authenticated attacker to execute arbitrary commands.

Affected Products

Vendor	Product	Versions
zyxel	—	—

Related News (1 articles)

Tier B

CCCS Canada18d ago

Zyxel security advisory (AV26-725)

→ No new info (linked only)

CISA KEV❌ No

Actively exploited❌ No

CWECWE-78

PublishedJul 21, 2026

Last enriched18d ago

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-14818

CVE-2026-14818: A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versi

Trending: 25

HIGHCVE-2026-6837

CVE-2026-6837: A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions

Trending: 17

MEDIUMCVE-2026-8508

CVE-2026-8508: An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions throug

Trending: 12

HIGHCVE-2026-6952

CVE-2026-6952: A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-B

Trending: 4

MEDIUMCVE-2026-3870

CVE-2026-3870: A buffer overflow vulnerability in the UPnP AddPortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.1

Pin to Dashboard

Verification

State: reported

Confidence: 72%

Vulnerability Timeline

CVE Published

Jul 21, 2026

Discovered by ZDM

Jul 21, 2026