Not scored
CVE-2026-1459
Zyxel VMG3625-T50B firmware vulnerability
ZyxelVMG3625-T50B firmware
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
1.0%probability of exploitation in the next 30 days
Higher than 61% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.7)C0 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on an affected device.
Coverage 2 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 25 Feb · 21:41 UTC | Security Affairs | Zyxel fixes critical UPnP RCE affecting a dozen router models |
| Thu 26 Feb · 12:26 UTC | SecurityWeek | Zyxel patches critical UPnP RCE flaw in 18 routers and extenders |
- Zyxel patches critical UPnP RCE flaw in 18 routers and extendersSecurityWeek · mentions it in passing
- Zyxel fixes critical UPnP RCE affecting a dozen router modelsSecurity Affairs · first in our coverage · mentions it in passing