Exploited vulnerabilities
Zyxel
13 Zyxel vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue13
Last 12 months1
In ransomware campaigns2
Last addition21 September 2026
The vulnerabilities13
- 21 September 2026CVE-2026-7273GS1900 Series SwitchesZyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
- 11 February 2025CVE-2024-40891DSL CPE DevicesZyxel DSL CPE OS Command Injection Vulnerability
- 11 February 2025CVE-2024-40890DSL CPE DevicesZyxel DSL CPE OS Command Injection Vulnerability
- 3 December 2024CVE-2024-11667Multiple FirewallsZyxel Multiple Firewalls Path Traversal VulnerabilityRansomware
- 18 September 2023CVE-2017-6884EMG2926 RoutersZyxel EMG2926 Routers Command Injection VulnerabilityRansomware
- 7 August 2023CVE-2017-18368P660HN-T1A RoutersZyxel P660HN-T1A Routers Command Injection Vulnerability
- 23 June 2023CVE-2023-27992Multiple Network-Attached Storage (NAS) DevicesZyxel Multiple NAS Devices Command Injection Vulnerability
- 5 June 2023CVE-2023-33010Multiple FirewallsZyxel Multiple Firewalls Buffer Overflow Vulnerability
- 5 June 2023CVE-2023-33009Multiple FirewallsZyxel Multiple Firewalls Buffer Overflow Vulnerability
- 31 May 2023CVE-2023-28771Multiple FirewallsZyxel Multiple Firewalls OS Command Injection Vulnerability
- 16 May 2022CVE-2022-30525Multiple FirewallsZyxel Multiple Firewalls OS Command Injection Vulnerability
- 25 March 2022CVE-2020-9054Multiple Network-Attached Storage (NAS) DevicesZyxel Multiple NAS Devices OS Command Injection Vulnerability
- 3 November 2021CVE-2020-29583Multiple ProductsZyxel Multiple Products Use of Hard-Coded Credentials Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, Zyxel included.