medium6.8
CVE-2026-0711
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an…
Impact
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Nr5307 Firmware | before 2.00\(acjt.3\)c0 |
| Zyxel | Nebula Fwa515 Firmware | before 1.60\(acpz.0\)v0 |
| Zyxel | Dx3300-T0 Firmware | before 5.50\(abvy.7.2\)c0 |
| Zyxel | Dx3300-T1 Firmware | before 5.50\(abvy.7.2\)c0 |
| Zyxel | Dx3301-T0 Firmware | before 5.50\(abvy.7.2\)c0 |
| Zyxel | Dx5401-B0 Firmware | before 5.17\(abyo.7.2\)c0 |
| Zyxel | Dx5401-B1 Firmware | before 5.17\(abyo.7.2\)c0 |
| Zyxel | Ee3301-00 Firmware | before 5.63\(acmu.3.1\)c0 |
| Zyxel | Ee5301-00 Firmware | before 5.63\(acld.3.1\)c0 |
| Zyxel | Ee6510-10 Firmware | before 5.19\(acjq.4.2\)c0 |
| Zyxel | Emg3525-T50b Firmware | before 5.50\(abpm.9.8\)c0 |
| Zyxel | Emg5523-T50b Firmware | before 5.50\(abpm.9.8\)c0 |