Zyxel known exploited vulnerabilities
The Beam CVE database tracks 13 known exploited vulnerabilities for Zyxel: 9 critical and 4 high severity. The newest is CVE-2026-7273, published Jun 16, 2026.
These are the Zyxel vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog: flaws with confirmed exploitation in the wild. Each entry links the vendor bulletin and CISA’s required action.
- Vulnerabilities tracked
- 13
- Critical
- 9
- Known exploited (CISA KEV)
- 13
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-7273
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
high8.8ExploitedJun 16, 2026CVE-2024-40890
Zyxel DSL CPE OS Command Injection Vulnerability
high8.8ExploitedFeb 4, 2025CVE-2024-40891
Zyxel DSL CPE OS Command Injection Vulnerability
high8.8ExploitedFeb 4, 2025CVE-2024-11667
Zyxel Multiple Firewalls Path Traversal Vulnerability
critical9.8ExploitedNov 27, 2024CVE-2023-27992
Zyxel Multiple NAS Devices Command Injection Vulnerability
critical9.8ExploitedJun 19, 2023CVE-2023-33009
Zyxel Multiple Firewalls Buffer Overflow Vulnerability
critical9.8ExploitedMay 24, 2023CVE-2023-33010
Zyxel Multiple Firewalls Buffer Overflow Vulnerability
critical9.8ExploitedMay 24, 2023CVE-2023-28771
Zyxel Multiple Firewalls OS Command Injection Vulnerability
critical9.8ExploitedApr 25, 2023CVE-2022-30525
Zyxel Multiple Firewalls OS Command Injection Vulnerability
critical9.8ExploitedMay 12, 2022CVE-2020-29583
Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability
critical9.8ExploitedDec 22, 2020CVE-2020-9054
Zyxel Multiple NAS Devices OS Command Injection Vulnerability
critical9.8ExploitedMar 4, 2020CVE-2017-18368
Zyxel P660HN-T1A Routers Command Injection Vulnerability
critical9.8ExploitedMay 2, 2019CVE-2017-6884
Zyxel EMG2926 Routers Command Injection Vulnerability
high8.8ExploitedApr 6, 2017
