← Back

CVE-2026-7257

nvd nist
Published: May 12, 2026Modified: Jun 17, 2026

JSON object

Loading...
4.4
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Exploitability: 0.8 / Impact: 3.6
Source: security@zyxel.com.tw (Secondary)

Description

** UNSUPPORTED WHEN ASSIGNED ** An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow a local attacker with administrator privileges to download and decrypt a backup configuration file.

Affected (1)

Zyxel
1 product
Wre6505 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wre6505 Firmware
Version v1.00(abdv.3)c0
Running on/withPlatform Versions
Zyxel
Wre6505
Version v2

Related CWEs

CWE-922
Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (1)

Source: security@zyxel.com.tw
Product

Timeline

No history available yet.