Vulnerabilities in Zyxel ZyWALL/USG, USG FLEX, ATP, and VPN-series firewalls and other SMB/branch-office edge networking gear — perimeter appliances that recur on the CISA KEV catalog and remain a durable target for botnet operators years after patch availability. Combined article + CVE feed for the Zyxel beat.https://0daynews.com/en-ushttps://0daynews.com/cve/cve-2017-18368/https://0daynews.com/cve/cve-2017-18368/Zyxel P660HN-T1A routers contain a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user and exploited via the remote_host parameter of the ViewLog.asp page.Thu, 03 Sep 2026 00:00:00 GMTZyxelcriticalcvehttps://0daynews.com/cve/cve-2017-6884/https://0daynews.com/cve/cve-2017-6884/Zyxel EMG2926 routers contain a command injection vulnerability located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute malicious commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI.Thu, 03 Sep 2026 00:00:00 GMTZyxelhighcvehttps://0daynews.com/cve/cve-2020-29583/https://0daynews.com/cve/cve-2020-29583/Zyxel firewalls (ATP, USG, VM) and AP Controllers (NXC2500 and NXC5500) contain a use of hard-coded credentials vulnerability in an undocumented account ("zyfwp") with an unchangeable password.Thu, 03 Sep 2026 00:00:00 GMTZyxelcriticalcvehttps://0daynews.com/cve/cve-2020-9054/https://0daynews.com/cve/cve-2020-9054/Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code.Thu, 03 Sep 2026 00:00:00 GMTZyxelcriticalcvehttps://0daynews.com/cve/cve-2022-30525/https://0daynews.com/cve/cve-2022-30525/A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.Thu, 03 Sep 2026 00:00:00 GMTZyxelcriticalcvehttps://0daynews.com/cve/cve-2023-27992/https://0daynews.com/cve/cve-2023-27992/Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an unauthenticated attacker to execute commands remotely via a crafted HTTP request.Thu, 03 Sep 2026 00:00:00 GMTZyxelcriticalcvehttps://0daynews.com/cve/cve-2023-28771/https://0daynews.com/cve/cve-2023-28771/An OS command-injection vulnerability in multiple Zyxel firewall product lines allows an unauthenticated attacker to execute arbitrary commands by sending a crafted packet to the device. Exploited by Mirai-variant botnets shortly after disclosure.Thu, 03 Sep 2026 00:00:00 GMTZyxelcriticalcvehttps://0daynews.com/cve/cve-2023-33009/https://0daynews.com/cve/cve-2023-33009/Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the notification function that could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and remote code execution on an affected device.Thu, 03 Sep 2026 00:00:00 GMTZyxelcriticalcvehttps://0daynews.com/cve/cve-2023-33010/https://0daynews.com/cve/cve-2023-33010/Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the ID processing function that could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and remote code execution on an affected device.Thu, 03 Sep 2026 00:00:00 GMTZyxelcriticalcvehttps://0daynews.com/cve/cve-2024-11667/https://0daynews.com/cve/cve-2024-11667/Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an attacker to download or upload files via a crafted URL.Thu, 03 Sep 2026 00:00:00 GMTZyxelhighcvehttps://0daynews.com/cve/cve-2024-40890/https://0daynews.com/cve/cve-2024-40890/Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the CGI program that could allow an authenticated attacker to execute OS commands via a crafted HTTP request.Thu, 03 Sep 2026 00:00:00 GMTZyxelhighcvehttps://0daynews.com/cve/cve-2024-40891/https://0daynews.com/cve/cve-2024-40891/Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the management commands that could allow an authenticated attacker to execute OS commands via Telnet.Thu, 03 Sep 2026 00:00:00 GMTZyxelhighcvehttps://0daynews.com/articles/2026-07-15-zyxel-cve-2023-28771-epss-099-three-years-post-patch/https://0daynews.com/articles/2026-07-15-zyxel-cve-2023-28771-epss-099-three-years-post-patch/Zyxel's 2023 firewall command-injection bug still ranks EPSS 0.99 three years post-patch. Scans stay constant; unpatched SMB perimeter boxes remain plentiful.Wed, 15 Jul 2026 17:15:00 GMTZyxelarticle