Cyberfeed6 › Vendors › Zyxel
CISA lists 13 Zyxel vulnerabilities as exploited in real attacks, and 2 of them are known to be used in ransomware campaigns. Most entries concern Multiple Firewalls, DSL CPE Devices, Multiple Network-Attached Storage (NAS) Devices, GS1900 Series Switches.
Showing the 13 most recently added of 13. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2026-7273Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | GS1900 Series Switches | 2026-09-21 | High (8.8) | No | Vendor notice |
| CVE-2024-40891Zyxel DSL CPE OS Command Injection Vulnerability | DSL CPE Devices | 2025-02-11 | High (8.8) | No | Vendor notice |
| CVE-2024-40890Zyxel DSL CPE OS Command Injection Vulnerability | DSL CPE Devices | 2025-02-11 | High (8.8) | No | Vendor notice |
| CVE-2024-11667Zyxel Multiple Firewalls Path Traversal Vulnerability | Multiple Firewalls | 2024-12-03 | High (7.5) | Yes | Vendor notice |
| CVE-2017-6884Zyxel EMG2926 Routers Command Injection Vulnerability | EMG2926 Routers | 2023-09-18 | High (8.8) | Yes | Vendor notice |
| CVE-2017-18368Zyxel P660HN-T1A Routers Command Injection Vulnerability | P660HN-T1A Routers | 2023-08-07 | Critical (9.8) | No | Vendor notice |
| CVE-2023-27992Zyxel Multiple NAS Devices Command Injection Vulnerability | Multiple Network-Attached Storage (NAS) Devices | 2023-06-23 | Critical (9.8) | No | Vendor notice |
| CVE-2023-33010Zyxel Multiple Firewalls Buffer Overflow Vulnerability | Multiple Firewalls | 2023-06-05 | Critical (9.8) | No | Vendor notice |
| CVE-2023-33009Zyxel Multiple Firewalls Buffer Overflow Vulnerability | Multiple Firewalls | 2023-06-05 | Critical (9.8) | No | Vendor notice |
| CVE-2023-28771Zyxel Multiple Firewalls OS Command Injection Vulnerability | Multiple Firewalls | 2023-05-31 | Critical (9.8) | No | Vendor notice |
| CVE-2022-30525Zyxel Multiple Firewalls OS Command Injection Vulnerability | Multiple Firewalls | 2022-05-16 | Critical (9.8) | No | |
| CVE-2020-9054Zyxel Multiple NAS Devices OS Command Injection Vulnerability | Multiple Network-Attached Storage (NAS) Devices | 2022-03-25 | Critical (9.8) | No | |
| CVE-2020-29583Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability | Multiple Products | 2021-11-03 | Critical (9.8) | No |
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.