Browse all 168 CVE security advisories affecting ZyXEL. AI-powered Chinese analysis, POCs, and references for each vulnerability.
ZyXEL Communications specializes in networking hardware, primarily producing broadband routers, wireless access points, and network-attached storage devices for residential and small-to-medium business environments. The company’s product portfolio has been associated with a significant volume of security flaws, with 156 Common Vulnerabilities and Exposures currently on record. Historically, these vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from inadequate input validation and weak authentication mechanisms in embedded web interfaces. Notable incidents include critical flaws allowing unauthenticated attackers to execute arbitrary commands or bypass access controls on various NAS and router models. These recurring issues highlight persistent challenges in the firm’s firmware development lifecycle, necessitating rigorous patch management for deployed infrastructure to mitigate risks of unauthorized system access and data compromise.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-1732 | Zyxel USG FLEX 安全漏洞 — USG FLEX H series uOS firmware CWE-269 | 6.7 | Medium | 2025-04-22 |
| CVE-2025-1731 | Zyxel USG FLEX 安全漏洞 — USG FLEX H series uOS firmware CWE-732 | 7.8 | High | 2025-04-22 |
| CVE-2024-12010 | Zyxel AX7501-B1 操作系统命令注入漏洞 — AX7501-B1 firmware CWE-78 | 7.2 | High | 2025-03-11 |
| CVE-2024-12009 | Zyxel EX5601-T1 操作系统命令注入漏洞 — EX5601-T1 firmware CWE-78 | 7.2 | High | 2025-03-11 |
| CVE-2024-11253 | Zyxel VMG8825-T50K 操作系统命令注入漏洞 — VMG8825-T50K firmware CWE-78 | 7.2 | High | 2025-03-11 |
| CVE-2025-0890 | Zyxel VMG4325-B10A 授权问题漏洞 — VMG4325-B10A firmware CWE-287 | 9.8 | Critical | 2025-02-04 |
| CVE-2024-40891 | Zyxel VMG4325-B10A 操作系统命令注入漏洞 — VMG4325-B10A firmware CWE-78 | 8.8 | High | 2025-02-04 |
| CVE-2024-40890 | Zyxel VMG4325-B10A 操作系统命令注入漏洞 — VMG4325-B10A firmware CWE-78 | 8.8 | High | 2025-02-04 |
| CVE-2024-12398 | Zyxel WBE530 安全漏洞 — WBE530 firmware CWE-269 | 8.8 | High | 2025-01-14 |
| CVE-2024-9200 | Zyxel VMG4005-B50A 安全漏洞 — VMG4005-B50A firmware CWE-78 | 7.2 | High | 2024-12-03 |
| CVE-2024-9197 | Zyxel VMG3625-T50B 安全漏洞 — VMG3625-T50B firmware CWE-120 | 4.9 | Medium | 2024-12-03 |
| CVE-2024-8748 | Zyxel VMG8825-T50K 安全漏洞 — VMG8825-T50K firmware CWE-120 | 7.5 | High | 2024-12-03 |
| CVE-2024-11667 | Zyxel多款产品 路径遍历漏洞 — ATP series firmware CWE-22 | 7.5 | High | 2024-11-27 |
| CVE-2024-11494 | Zyxel P-6101C 授权问题漏洞 — P-6101C firmware CWE-287 | 7.5 | High | 2024-11-20 |
| CVE-2024-8882 | Zyxel GS1900 安全漏洞 — GS1900-48 firmware CWE-120 | 4.5 | Medium | 2024-11-12 |
| CVE-2024-8881 | Zyxel GS1900 安全漏洞 — GS1900-48 firmware CWE-78 | 6.8 | Medium | 2024-11-12 |
| CVE-2024-9677 | Zyxel USG FLEX 安全漏洞 — USG FLEX H series uOS firmware CWE-522 | 5.5 | Medium | 2024-10-22 |
| CVE-2024-38269 | Zyxel VMG8825-T50K 缓冲区错误漏洞 — VMG8825-T50K firmware CWE-119 | 4.9 | Medium | 2024-09-24 |
| CVE-2024-38268 | Zyxel VMG8825-T50K 缓冲区错误漏洞 — VMG8825-T50K firmware CWE-119 | 4.9 | Medium | 2024-09-24 |
| CVE-2024-38267 | Zyxel VMG8825-T50K 缓冲区错误漏洞 — VMG8825-T50K firmware CWE-119 | 4.9 | Medium | 2024-09-24 |
| CVE-2024-38266 | Zyxel VMG8825-T50K 缓冲区错误漏洞 — VMG8825-T50K firmware CWE-119 | 4.9 | Medium | 2024-09-24 |
| CVE-2024-6342 | Zyxel NAS542和NAS326 操作系统命令注入漏洞 — NAS326 firmware CWE-78 | 9.8 | Critical | 2024-09-10 |
| CVE-2024-38270 | Zyxel GS1900 安全特征问题漏洞 — GS1900-10HP firmware CWE-331 | 5.3 | Medium | 2024-09-10 |
| CVE-2024-7261 | Zyxel多款产品 操作系统命令注入漏洞 — NWA1123ACv3 firmware CWE-78 | 9.8 | Critical | 2024-09-03 |
| CVE-2024-42061 | Zyxel多款产品 跨站脚本漏洞 — ATP series firmware CWE-79 | 6.1 | Medium | 2024-09-03 |
| CVE-2024-42060 | Zyxel多款产品 操作系统命令注入漏洞 — ATP series firmware CWE-78 | 7.2 | High | 2024-09-03 |
| CVE-2024-42059 | Zyxel多款产品 安全漏洞 — ATP series firmware CWE-78 | 7.2 | High | 2024-09-03 |
| CVE-2024-42058 | Zyxel多款产品 代码问题漏洞 — ATP series firmware CWE-476 | 7.5 | High | 2024-09-03 |
| CVE-2024-42057 | Zyxel多款产品 操作系统命令注入漏洞 — ATP series firmware CWE-78 | 8.1 | High | 2024-09-03 |
| CVE-2024-7203 | Zyxel ATP series firmware和Zyxel USG FLEX series firmware 操作系统命令注入漏洞 — ATP series firmware CWE-78 | 7.2 | High | 2024-09-03 |
This page lists every published CVE security advisory associated with ZyXEL. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.