netVigilance Vulnerability intelligence since 2004

Zyxel

12 Zyxel vulnerabilities with confirmed exploitation in the wild, as published by CISA; 12 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Zyxel
Vulnerability Status
overdue 555d2025-03-04 CVE-2024-40891 Zyxel / DSL CPE Devices Zyxel DSL CPE OS Command Injection Vulnerability 2025-02-11 8.8 past due
overdue 555d2025-03-04 CVE-2024-40890 Zyxel / DSL CPE Devices Zyxel DSL CPE OS Command Injection Vulnerability 2025-02-11 8.8 past due
overdue 625d2024-12-24 CVE-2024-11667 Zyxel / Multiple Firewalls Zyxel Multiple Firewalls Path Traversal Vulnerability 2024-12-03 9.8 past dueransomware
overdue 1067d2023-10-09 CVE-2017-6884 Zyxel / EMG2926 Routers Zyxel EMG2926 Routers Command Injection Vulnerability 2023-09-18 8.8 past dueransomware
overdue 1109d2023-08-28 CVE-2017-18368 Zyxel / P660HN-T1A Routers Zyxel P660HN-T1A Routers Command Injection Vulnerability 2023-08-07 9.8 past due
overdue 1154d2023-07-14 CVE-2023-27992 Zyxel / Multiple Network-Attached Storage (NAS) Devices Zyxel Multiple NAS Devices Command Injection Vulnerability 2023-06-23 9.8 past due
overdue 1172d2023-06-26 CVE-2023-33010 Zyxel / Multiple Firewalls Zyxel Multiple Firewalls Buffer Overflow Vulnerability 2023-06-05 9.8 past due
overdue 1172d2023-06-26 CVE-2023-33009 Zyxel / Multiple Firewalls Zyxel Multiple Firewalls Buffer Overflow Vulnerability 2023-06-05 9.8 past due
overdue 1177d2023-06-21 CVE-2023-28771 Zyxel / Multiple Firewalls Zyxel Multiple Firewalls OS Command Injection Vulnerability 2023-05-31 9.8 past due
overdue 1557d2022-06-06 CVE-2022-30525 Zyxel / Multiple Firewalls Zyxel Multiple Firewalls OS Command Injection Vulnerability 2022-05-16 9.8 past due
overdue 1609d2022-04-15 CVE-2020-9054 Zyxel / Multiple Network-Attached Storage (NAS) Devices Zyxel Multiple NAS Devices OS Command Injection Vulnerability 2022-03-25 9.8 past due
overdue 1591d2022-05-03 CVE-2020-29583 Zyxel / Multiple Products Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability 2021-11-03 9.8 past due