CVE-2024-7261

criticalpriority · track · 4EPSS 0.114 · 96 %ileEUNLRUUS

grimoire priorityP1 · Urgent

Exploitable?

—

no known exploitation

Likely / severe?

11.4% (96th) EPSS

CVSS 9.8 · critical

Is it mine?

67 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · ncsc_nl

EPSS · scored 2026-10-27

The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4) and earlier, WAC500 firmware version 6.70(ABVS.4) and earlier, WAX655E firmware version 7.00(ACDO.1) and earlier, WBE530 firmware version 7.00(ACLE.1) and earlier, and USG LITE 60AX firmware version V2.00(ACIP.2) could allow an unauthenticated attacker to execute OS commands by sending a crafted cookie to a vulnerable device.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · security@zyxel.com.twexploitability 3.9 · impact 5.9

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-78USCWE-78USCWE-78US

affected products (67)

Products and version ranges known to be affected.

Zyxel NWA1123ACv3 firmware≤ ≤ 6.70(ABVT.4)enisa_euvdEU
Zyxel USG LITE 60AX firmware≤ V2.00(ACIP.2)enisa_euvdEU
Zyxel WAC500 firmware≤ ≤ 6.70(ABVS.4)enisa_euvdEU
Zyxel WAX655E firmware≤ ≤ 7.00(ACDO.1)enisa_euvdEU
Zyxel WBE530 firmware≤ ≤ 7.00(ACLE.1)enisa_euvdEU
Zyxel Communications Corp. USG LITE 60AX≤ V2.00(ACIP.2)fstec_bduRU
Zyxel Communications Corp. ZYXEL NWA110AX≤ 7.00(ABTG.1)fstec_bduRU
Zyxel Communications Corp. ZYXEL NWA1123-AC PRO≤ 6.28(ABHD.0)fstec_bduRU
Zyxel Communications Corp. ZYXEL NWA1123ACv3≤ 6.70(ABVT.4)fstec_bduRU
Zyxel Communications Corp. ZYXEL NWA130BE≤ 7.00(ACIL.1)fstec_bduRU
Zyxel Communications Corp. ZYXEL NWA210AX≤ 7.00(ABTD.1)fstec_bduRU
Zyxel Communications Corp. ZYXEL NWA220AX-6E≤ 7.00(ACCO.1)fstec_bduRU
Zyxel Communications Corp. ZYXEL NWA50AX≤ 7.00(ABYW.1)fstec_bduRU
Zyxel Communications Corp. ZYXEL NWA50AX-PRO≤ 7.00(ACGE.1)fstec_bduRU
Zyxel Communications Corp. ZYXEL NWA55AXE≤ 7.00(ABZL.1)fstec_bduRU
Zyxel Communications Corp. ZYXEL NWA90AX≤ 7.00(ACCV.1)fstec_bduRU
Zyxel Communications Corp. ZYXEL NWA90AX-PRO≤ 7.00(ACGF.1)fstec_bduRU
Zyxel Communications Corp. ZYXEL WAC500≤ 6.70(ABVS.4)fstec_bduRU
Zyxel Communications Corp. ZYXEL WAC500H≤ 6.70(ABWA.4)fstec_bduRU
Zyxel Communications Corp. ZYXEL WAC6502D-S≤ 6.28(AASE.0)fstec_bduRU

showing 20 of 67

advisories (1)

Vendor and ecosystem advisories describing this.

NCSC-2024-0356Kwetsbaarheid verholpen in Zyxel Access Points en Secure RoutersNL2024-09-03csaf · ncsc_nlNL
Zyxel heeft een kwetsbaarheid verholpen in diverse types Access Points en Secure Routers.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu ncsc_nl NVD CVE.org MITRE

published 2024-09-03modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan