#zyxel — Public Fediverse posts

CVE-2026-13206: CRITICAL OS command injection in Zyxel WAH7601 (≤20072026). Remote, unauthenticated code execution possible — no patch yet. Restrict access & monitor vendor updates. Details: https://radar.offseq.com/threat/cve-2026-13206-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-16288f4bcb3de542 #OffSeq #CVE #Zyxel #Vuln #InfoSec

Status meiner Internetzugangsbeziehung: Es ist unkompliziert 😁.
#Glasfaser bei der #Telekom bestellt. Techniker hat Kabel vom Keller in die Wohnung gezogen. Habe das "Telekom" #Glasfasermodem von #Zyxel in den #SFP Slot meines #tplink #vx800v gesteckt, das Modem über den Einrichtungslink der Telekom registriert und... es ging auf Anhieb!! 🕺😎

Just found out, that acme.sh supports deploying certs to zyxel gs1900 switches AND opnsense supports it as automation 😎
Proxmox, truenas are supported too, but I do have processes for these hosts already.
#acmesh #opnsense #zyxel #gs1900 #httpseverwhere

CVE Alert: CVE-2026-6837 - Zyxel - WAX650S firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-6837-zyxel-wax650s-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-6837 #zyxel #wax650s-firmware

CVE Alert: CVE-2026-14818 - Zyxel - ATP series firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-14818-zyxel-atp-series-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-14818 #zyxel #atp-series-firmware

CVE Alert: CVE-2026-6837 - Zyxel - WAX650S firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-6837-zyxel-wax650s-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-6837 #zyxel #wax650s-firmware

CVE Alert: CVE-2026-14818 - Zyxel - ATP series firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-14818-zyxel-atp-series-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-14818 #zyxel #atp-series-firmware

CVE-2026-6837 - Post-auth command injection in Zyxel WAX650S export-cgi. Admin RCE. CVSS 7.2. Unpatched - restrict admin access now. #CVE #Zyxel #infosec

https://www.valtersit.com/cve/CVE-2026-6837/

CVE-2026-6837 - Post-auth command injection in Zyxel WAX650S export-cgi. Admin RCE. CVSS 7.2. Unpatched - restrict admin access now. #CVE #Zyxel #infosec

https://www.valtersit.com/cve/CVE-2026-6837/

#Zyxel Raises Security Standards for #SMB s and #MSP s in the Era of #AI Attacks

https://gadgetflux.eu/zyxel-ntareste-guvernanta-securitatii-produselor/

#Zyxel Raises Security Standards for #SMB s and #MSP s in the Era of #AI Attacks

https://gadgetflux.eu/zyxel-ntareste-guvernanta-securitatii-produselor/

Zyxel: 70 CVEs, 3 CISA KEV exploited, 100% unpatched. Trust Score: D. Critical flaws in routers/firewalls (CWE-78 injection). Patch gaps are dangerous. #Zyxel #cybersecurity #infosec

https://www.valtersit.com/vendors/zyxel/

CVE-2024-7261 - Critical OS Command Injection in Zyxel devices. Unauthenticated RCE via crafted cookie. CVSS 9.8. No patch available yet. Isolate affected devices immediately. #CVE #Zyxel #cybersecurity

https://www.valtersit.com/cve/CVE-2024-7261/

#GenAI, the new #Zyxel solution for #secure management of generative #AI for SMEs

https://gadgetflux.eu/zyxel-lanseaza-genai-protection-pentru-imm-uri/

#GenAI, the new #Zyxel solution for #secure management of generative #AI for SMEs

https://gadgetflux.eu/zyxel-lanseaza-genai-protection-pentru-imm-uri/

CVE Alert: CVE-2026-1460 - Zyxel - DX3301-T0 firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-1460-zyxel-dx3301-t0-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-1460 #zyxel #dx3301-t0-firmware

CVE Alert: CVE-2026-1460 - Zyxel - DX3301-T0 firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-1460-zyxel-dx3301-t0-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-1460 #zyxel #dx3301-t0-firmware

Uns sind in letzter Zeit einige #tp_link Archer C7 ausgestiegen. Leider gestern auch in einer Unterkunft für #refugees im Süden von @Duesseldorf . @Retter hat seine letzten drei privaten Router (2 x #Zyxel + 1 x #FritzBox 4040) zur Verfügung gestellt und mit #remote Unterstützung von @adorfer eingebaut. - Nicht schön aber #laeuft wieder und das sogar besser als vorher.
#Freifunk #Unterstuetzung #welcome

Uns sind in letzter Zeit einige #tp_link Archer C7 ausgestiegen. Leider gestern auch in einer Unterkunft für #refugees im Süden von @Duesseldorf . @Retter hat seine letzten drei privaten Router (2 x #Zyxel + 1 x #FritzBox 4040) zur Verfügung gestellt und mit #remote Unterstützung von @adorfer eingebaut. - Nicht schön aber #laeuft wieder und das sogar besser als vorher.
#Freifunk #Unterstuetzung #welcome

To all the fairground operators and network providers in Germany:

FTTBooth at a machine tool fair in Taiwan
vs xDSL in Germany

#zyxel #chunghwatelecomco

Was baut man um diese Uhrzeit nicht für Kabel, um den #ZyXEL #DSLAM zum laufen zu bekommen.

Ist ein RJ9 auf Seriell Kabel für den Konsolenport. Die Belegung stand zum Glück im Handbuch.

Was baut man um diese Uhrzeit nicht für Kabel, um den #ZyXEL #DSLAM zum laufen zu bekommen.

Ist ein RJ9 auf Seriell Kabel für den Konsolenport. Die Belegung stand zum Glück im Handbuch.

NCTAG 5.8: The Zyxel Perimeter Crisis
120,000 targets identified. The Cyber Mind Co™ has released Global Watchtower Manifest (GWM) NCTAG 1.1, detailing a critical Unauthenticated RCE (CVE-2025-13942) in Zyxel devices

https://thecybermind.co/2026/02/25/zyxel-upnp-crisis-cve-2025-13942/
#RCE #Zyxel

https://thecybermind.co/2026/02/25/zyxel-upnp-crisis-cve-2025-13942/?utm_source=mastodon&utm_medium=jetpack_social

⚠️ CVE-2026-1459: HIGH-severity OS command injection in Zyxel VMG3625-T50B firmware ≤5.50(ABPM.9.7)C0. Authenticated admin can run arbitrary commands. Restrict admin access & monitor. Patch ASAP when released! https://radar.offseq.com/threat/cve-2026-1459-cwe-78-improper-neutralization-of-sp-f412c512 #OffSeq #Zyxel #CVE20261459 #InfoSec

CVE Alert: CVE-2026-1459 - Zyxel - VMG3625-T50B firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-1459-zyxel-vmg3625-t50b-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-1459 #zyxel #vmg3625-t50b-firmware

CVE Alert: CVE-2026-1459 - Zyxel - VMG3625-T50B firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-1459-zyxel-vmg3625-t50b-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-1459 #zyxel #vmg3625-t50b-firmware

CVE Alert: CVE-2025-13943 - Zyxel - EX3301-T0 firmware - https://www.redpacketsecurity.com/cve-alert-cve-2025-13943-zyxel-ex3301-t0-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-13943 #zyxel #ex3301-t0-firmware

CVE Alert: CVE-2025-13943 - Zyxel - EX3301-T0 firmware - https://www.redpacketsecurity.com/cve-alert-cve-2025-13943-zyxel-ex3301-t0-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-13943 #zyxel #ex3301-t0-firmware

#Zyxel-Firewalls: Angreifer können System-Befehle ausführen | Security https://www.heise.de/news/Zyxel-Firewalls-Angreifer-koennen-System-Befehle-ausfuehren-11169185.html #Patchday

#Zyxel-Firewalls: Angreifer können System-Befehle ausführen | Security https://www.heise.de/news/Zyxel-Firewalls-Angreifer-koennen-System-Befehle-ausfuehren-11169185.html #Patchday

Well 1 day in, so far my conversion from #Unifi / #Ubiquiti to #zyxel has been excellent.

The three Wi-Fi APs seem to be pretty solid, I even got just a tad over a gigabit when testing against my computer that has 2.5Gbps Ethernet.

Loaded latency seems to be better too as the bottleneck is now my ISP rather than local network.

Interestingly I think the new switch has also been better, but that was moving from #tplink to Zyxel for that.

Well 1 day in, so far my conversion from #Unifi / #Ubiquiti to #zyxel has been excellent.

The three Wi-Fi APs seem to be pretty solid, I even got just a tad over a gigabit when testing against my computer that has 2.5Gbps Ethernet.

Loaded latency seems to be better too as the bottleneck is now my ISP rather than local network.

Interestingly I think the new switch has also been better, but that was moving from #tplink to Zyxel for that.

CVE Alert: CVE-2025-11730 - Zyxel - ATP series firmware - https://www.redpacketsecurity.com/cve-alert-cve-2025-11730-zyxel-atp-series-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-11730 #zyxel #atp-series-firmware

CVE Alert: CVE-2025-11730 - Zyxel - ATP series firmware - https://www.redpacketsecurity.com/cve-alert-cve-2025-11730-zyxel-atp-series-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-11730 #zyxel #atp-series-firmware

Zyxel claimed on 2024-11-27 that the attack wave of ransomware group 'Helldown' was not related to a zero day (even though multiple researchers incl. my team suspected a zero day and warned Zyxel):

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-protecting-against-recent-firewall-threats-11-27-2024

On 2024-11-25 (two days before) a researcher team at Galaxus reported a zero day to Zyxel which now got confirmed:

https://www.galaxus.de/en/page/on-the-hunt-0-day-vulnerability-in-zyxel-router-36462

So much for that...

#zyxel #zeroday #CVE-2024-12010 #cve

Zyxel claimed on 2024-11-27 that the attack wave of ransomware group 'Helldown' was not related to a zero day (even though multiple researchers incl. my team suspected a zero day and warned Zyxel):

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-protecting-against-recent-firewall-threats-11-27-2024

On 2024-11-25 (two days before) a researcher team at Galaxus reported a zero day to Zyxel which now got confirmed:

https://www.galaxus.de/en/page/on-the-hunt-0-day-vulnerability-in-zyxel-router-36462

So much for that...

#zyxel #zeroday #CVE-2024-12010 #cve

Zyxel, ottenuta approvazione SBTi per gli obiettivi di riduzione delle emissioni di carbonio: Zyxel Networks nelle scorse settimane ha annunciato che gli obiettivi di riduzione delle emissioni di gas serra (GHG) del Gruppo Zyxel sono stati validati dalla Science...
#Zyxel #SBTi #emissionidicarbonio #obiettivinetzero #sostenibilitàambientale http://dlvr.it/TQ8db9

That #Zyxel removes firmware files for their EOL switches from their website is some next level bullshit.

That #Zyxel removes firmware files for their EOL switches from their website is some next level bullshit.

Hoping for a Christmas Miracle.
Network ultra-nerds, do you have a solution to this:

I have a security gateway that when booted with an old firmware works just fine, but with a new one TLS handshakes fail for *most* clients. If I change the MTU on the server from 1500 to 1200 it'll start working for *most* clients, but not all.. The remaining failing ones I've seen so far are close to my geography.
I've had no issues with clients on my own ISP.

#Networks #ZyXEL #HTTPS #pfSense

Hoping for a Christmas Miracle.
Network ultra-nerds, do you have a solution to this:

I have a security gateway that when booted with an old firmware works just fine, but with a new one TLS handshakes fail for *most* clients. If I change the MTU on the server from 1500 to 1200 it'll start working for *most* clients, but not all.. The remaining failing ones I've seen so far are close to my geography.
I've had no issues with clients on my own ISP.

#Networks #ZyXEL #HTTPS #pfSense

CVE Alert: CVE-2025-8693 - Zyxel - DX3300-T0 firmware - https://www.redpacketsecurity.com/cve-alert-cve-2025-8693-zyxel-dx3300-t0-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-8693 #zyxel #dx3300-t0-firmware

CVE Alert: CVE-2025-8693 - Zyxel - DX3300-T0 firmware - https://www.redpacketsecurity.com/cve-alert-cve-2025-8693-zyxel-dx3300-t0-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-8693 #zyxel #dx3300-t0-firmware

🛡️ CVE-2025-8693: HIGH severity OS command injection in Zyxel DX3300-T0 firmware ≤5.50(ABVY.6.3)C0. Authenticated attackers can execute arbitrary commands. Restrict access & monitor logs until patched. https://radar.offseq.com/threat/cve-2025-8693-cwe-78-improper-neutralization-of-sp-9e514a8a #OffSeq #Zyxel #Vuln #BlueTeam

Could One Device Transform Every Factory Floor Overnight?

Zyxel Networks has introduced its first industrial-grade WiFi 7 access point, the BE5000 4-Stream Dual-Radio NebulaFlex Pro (IAP500BE), aiming to revolutionize connectivity in demanding industrial environments.

Launched on November 6, 2025, the IAP500BE is designed for warehouses, factories, and maintenance facilities where signal interference and outdated WiFi often slow down operations.

The new device leverages WiFi 7 to deliver multi-gigabit speeds and ultra-low latency, supporting factory sensors, automated guided vehicles, and worker handhelds without connection drops.

Its Smart Mesh MLO technology combines multi-link operation with mesh networking, increasing throughput by up to 40 percent while extending coverage.

An RF-First design reduces interference from adjacent networks, offering cleaner signals across sprawling industrial spaces.

Built for reliability, the IAP500BE features a metal housing, fanless design, and robust climate tolerance, functioning in temperatures from -25°C to 65°C.

It includes dual power inputs with reverse polarity safeguards, ensuring continuous operation even during electrical failures.

Deployment is flexible, with options for wall mounts, DIN-rails, or enclosed cabinets, and external antenna support optimizes coverage.

Management can be standalone, via on-premises controllers, or through Zyxel’s Nebula Cloud platform, which includes a one-year Pro Pack license for cloud-based network monitoring and maintenance.

Gary Chen, Zyxel Networks’ ANZ regional head, said the IAP500BE bridges the gap for industrial sites stuck on outdated WiFi, accelerating digital transformation with faster speeds, robust reliability, and simplified management.

#BUSINESS #cybersecurity #dataCenter #events #latest #NETWORK #news #Philippines #Technology #Zyxel

#OpenWRT supports the #zyxel NWA90AX now - my patch has been merged: https://cweiske.de/tagebuch/openwrt-zyxel-nwa90ax.htm and https://github.com/openwrt/openwrt/pull/20308

Sicherheitsupdate: Unberechtigte Zugriffe auf #Zyxel-Firewalls möglich | Security https://www.heise.de/news/Sicherheitsupdate-Unberechtigte-Zugriffe-auf-Zyxel-Firewalls-moeglich-10794033.html #Patchday

Sicherheitsupdate: Unberechtigte Zugriffe auf #Zyxel-Firewalls möglich | Security https://www.heise.de/news/Sicherheitsupdate-Unberechtigte-Zugriffe-auf-Zyxel-Firewalls-moeglich-10794033.html #Patchday

CVE Alert: CVE-2025-9133 - Zyxel - ATP series firmware - https://www.redpacketsecurity.com/cve-alert-cve-2025-9133-zyxel-atp-series-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-9133 #zyxel #atp-series-firmware

CVE Alert: CVE-2025-8078 - Zyxel - ATP series firmware - https://www.redpacketsecurity.com/cve-alert-cve-2025-8078-zyxel-atp-series-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-8078 #zyxel #atp-series-firmware

CVE Alert: CVE-2025-9133 - Zyxel - ATP series firmware - https://www.redpacketsecurity.com/cve-alert-cve-2025-9133-zyxel-atp-series-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-9133 #zyxel #atp-series-firmware