Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-1460

A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device.

CVSS 3.1 · 7.2 High EPSS 1.2% KEV · Not listed
Vendors
Zyxel
Products
Am7510-00 Am7510-00 Firmware Ax7501-b1 and 87 more
CVE-2026-0711

Post‑authentication command injection in Zyxel DX3300‑T0 EasyMesh APIs

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Zyxel
Products
Ax7501-b0 Ax7501-b0 Firmware Ax7501-b1 and 69 more