CVE-2026-0711

Published: Apr 28, 2026Modified: Jul 8, 2026

6.8

Vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: security@zyxel.com.tw (Secondary)

Description

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device.

Affected (36)

Products: Zyxel: Nr5307 Firmware, Nebula Fwa515 Firmware, Dx3300 T0 Firmware, Dx3300 T1 Firmware, Dx3301 T0 Firmware, Dx5401 B0 Firmware, Dx5401 B1 Firmware, Ee3301 00 Firmware, Ee5301 00 Firmware, Ee6510 10 Firmware, Emg3525 T50b Firmware, Emg5523 T50b Firmware, Ex3300 T0 Firmware, Ex3300 T1 Firmware, Ex3301 T0 Firmware, Ex3500 T0 Firmware, Ex3501 T0 Firmware, Ex3600 T0 Firmware, Ex5401 B0 Firmware, Ex5401 B1 Firmware, Ex5512 T0 Firmware, Ex5601 T0 Firmware, Ex5601 T1 Firmware, Ex7501 B0 Firmware, Vmg3625 T50b Firmware, Vmg8623 T50b Firmware, Ax7501 B0 Firmware, Ax7501 B1 Firmware, Pe3301 00 Firmware, Pe5301 01 Firmware, Px5302 00 Firmware, Px5301 T0 Firmware, We3300 00 Firmware, Wx3100 T0 Firmware, We4600 00 Firmware, Wx5600 T0 Firmware

Zyxel

36 products

Nr5307 Firmware

Nebula Fwa515 Firmware

Emg3525 T50b Firmware

Emg5523 T50b Firmware

Vmg3625 T50b Firmware

Vmg8623 T50b Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Nr5307 Firmware	Before 2.00\(acjt.3\)c0

Running on/with	Platform Versions
Zyxel Nr5307	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Nebula Fwa515 Firmware	Before 1.60\(acpz.0\)v0

Running on/with	Platform Versions
Zyxel Nebula Fwa515	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Dx3300 T0 Firmware	Before 5.50\(abvy.7.2\)c0

Running on/with	Platform Versions
Zyxel Dx3300 T0	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Dx3300 T1 Firmware	Before 5.50\(abvy.7.2\)c0

Running on/with	Platform Versions
Zyxel Dx3300 T1	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Dx3301 T0 Firmware	Before 5.50\(abvy.7.2\)c0

Running on/with	Platform Versions
Zyxel Dx3301 T0	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Dx5401 B0 Firmware	Before 5.17\(abyo.7.2\)c0

Running on/with	Platform Versions
Zyxel Dx5401 B0	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Dx5401 B1 Firmware	Before 5.17\(abyo.7.2\)c0

Running on/with	Platform Versions
Zyxel Dx5401 B1	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ee3301 00 Firmware	Before 5.63\(acmu.3.1\)c0

Running on/with	Platform Versions
Zyxel Ee3301 00	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ee5301 00 Firmware	Before 5.63\(acld.3.1\)c0

Running on/with	Platform Versions
Zyxel Ee5301 00	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ee6510 10 Firmware	Before 5.19\(acjq.4.2\)c0

Running on/with	Platform Versions
Zyxel Ee6510 10	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Emg3525 T50b Firmware	Before 5.50\(abpm.9.8\)c0

Running on/with	Platform Versions
Zyxel Emg3525 T50b	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Emg5523 T50b Firmware	Before 5.50\(abpm.9.8\)c0

Running on/with	Platform Versions
Zyxel Emg5523 T50b	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ex3300 T0 Firmware	Before 5.50\(abvy.7.2\)c0

Running on/with	Platform Versions
Zyxel Ex3300 T0	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ex3300 T1 Firmware	Before 5.50\(abvy.7.2\)c0

Running on/with	Platform Versions
Zyxel Ex3300 T1	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ex3301 T0 Firmware	Before 5.50\(abvy.7.2\)c0

Running on/with	Platform Versions
Zyxel Ex3301 T0	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ex3500 T0 Firmware	Before 5.44\(achr.6\)c0

Running on/with	Platform Versions
Zyxel Ex3500 T0	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ex3501 T0 Firmware	Before 5.44\(achr.6\)c0

Running on/with	Platform Versions
Zyxel Ex3501 T0	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ex3600 T0 Firmware	Before 5.70\(acif.3\)c0

Running on/with	Platform Versions
Zyxel Ex3600 T0	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ex5401 B0 Firmware	Before 5.17\(abyo.7.2\)c0

Running on/with	Platform Versions
Zyxel Ex5401 B0	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ex5401 B1 Firmware	Before 5.17\(abyo.7.2\)c0

Running on/with	Platform Versions
Zyxel Ex5401 B1	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ex5512 T0 Firmware	Before 5.70\(aceg.5.5\)c0

Running on/with	Platform Versions
Zyxel Ex5512 T0	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ex5601 T0 Firmware	Before 5.70\(acdz.6\)c0

Running on/with	Platform Versions
Zyxel Ex5601 T0	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ex5601 T1 Firmware	Before 5.70\(acdz.6\)c0

Running on/with	Platform Versions
Zyxel Ex5601 T1	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ex7501 B0 Firmware	Before 5.18\(achn.3.2\)c0

Running on/with	Platform Versions
Zyxel Ex7501 B0	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg3625 T50b Firmware	Before 5.50\(abpm.9.8\)c0

Running on/with	Platform Versions
Zyxel Vmg3625 T50b	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Vmg8623 T50b Firmware	Before 5.50\(abpm.9.8\)c0

Running on/with	Platform Versions
Zyxel Vmg8623 T50b	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ax7501 B0 Firmware	Before 5.17\(abpc.7.2\)c0

Running on/with	Platform Versions
Zyxel Ax7501 B0	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Ax7501 B1 Firmware	Before 5.17\(abpc.7.2\)c0

Running on/with	Platform Versions
Zyxel Ax7501 B1	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Pe3301 00 Firmware	Before 5.63\(acmt.3.1\)c0

Running on/with	Platform Versions
Zyxel Pe3301 00	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Pe5301 01 Firmware	Before 5.63\(acoj.3.1\)c0

Running on/with	Platform Versions
Zyxel Pe5301 01	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Px5302 00 Firmware	Before 5.44\(acnm.0.1\)c0

Running on/with	Platform Versions
Zyxel Px5302 00	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Px5301 T0 Firmware	Before 5.44\(ackb.0.7\)c0

Running on/with	Platform Versions
Zyxel Px5301 T0	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel We3300 00 Firmware	Before 5.70\(acka.2\)c0

Running on/with	Platform Versions
Zyxel We3300 00	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Wx3100 T0 Firmware	Before 5.50\(abvl.4.10\)c0

Running on/with	Platform Versions
Zyxel Wx3100 T0	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel We4600 00 Firmware	Before 6.70\(ackt.1\)c0

Running on/with	Platform Versions
Zyxel We4600 00	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zyxel Wx5600 T0 Firmware	Before 5.70\(aceb.6\)c0

Running on/with	Platform Versions
Zyxel Wx5600 T0	All versions

Related CWEs

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (1)

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-and-wireless-extenders-04-28-2026

Source: security@zyxel.com.tw

Vendor Advisory

Timeline

No history available yet.