Vulnerabilities
Summary — last 7 days
New vulnerabilities2,674▼ 561 vs. last week
Critical / high1,270▼ 252 vs. last week
New active exploitation (KEV)3▼ 5 vs. last week
Unscored (no CVSS)217▼ 222 vs. last week
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | Critical (9.8) | 14% | 💥 PoC | Zyxel Vmg4325-b10a FirmwareZyxel Sbg3500-n000 FirmwareZyxel Vmg1312-b10a FirmwareZyxel Vmg1312-b10b Firmware+10 | 2/4/2025 | 6/17/2026 | **UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an attacker to log in to the management interface if the administrators have the option to change the default credentials but fail to do so. | |
| Analyzed | High (8.8) | 22% | ⚠ Active exploitation💥 PoC | Zyxel Vmg1312-b10a FirmwareZyxel Vmg1312-b10b FirmwareZyxel Vmg1312-b10e FirmwareZyxel Vmg3312-b10a Firmware+10 | 2/4/2025 | 6/17/2026 | **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via Telnet. | |
| Analyzed | High (8.8) | 21% | ⚠ Active exploitation | Zyxel Vmg1312-b10a FirmwareZyxel Vmg1312-b10b FirmwareZyxel Vmg1312-b10e FirmwareZyxel Vmg3312-b10a Firmware+10 | 2/4/2025 | 6/17/2026 | **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device by sending a crafted HTTP POST… | |
| Modified | Medium (5.9) | 0.79% | — | Zyxel Nwa1100-n FirmwareZyxel Nwa1100-nh FirmwareZyxel Nwa1121-ni FirmwareZyxel Nwa1123-ac Firmware+21 | 9/28/2017 | 6/17/2026 | ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG1312-B30B, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, VMG8924-B30A, and VSG1435-B101 DSL CPEs; PMG5318-B20A GPONs; SBG3300-N000, SBG3300-NB00, and SBG3500-N000 small business… |