medium6.5

CVE-2026-8508

An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an attacke…

Impact

An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an attacker on the WLAN to bypass captive portal authentication.

Affected products

Vendor	Product	Affected versions
Zyxel	Zyxel WAX650S Firmware	through 7.10

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

CWE-287

References

NVD record
CVE.org record
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-improper-authentication-vulnerabilities-in-certain-aps-fwa7-and-security-routers-08-04-2026