high7.2
CVE-2026-1459
A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(A…
Impact
A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.7)C0 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on an affected device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Vmg3625-T50c Firmware | through 5.50\(abpm.9.7\)c0 |
| Zyxel | Vmg3625-T50b Firmware | through 5.50\(abpm.9.7\)c0 |
| Zyxel | Emg5523-T50b Firmware | through 5.50\(abpm.9.7\)c0 |
| Zyxel | Emg3525-T50b Firmware | through 5.50\(abpm.9.7\)c0 |
| Zyxel | Dx5401-B1 Firmware | through 5.17\(abyo.7.1\)c0 |
| Zyxel | Vmg8623-T50b Firmware | through 5.50\(abpm.9.7\)c0 |