CVE-2026-0711
MEDIUM6.8CVSS v3
—CVSS v2
0.85%
EPSS (exploit probability)
CWE-78CWE
Description
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device.
CVSS v3 vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected routers (1)
| Vendor | Model | Matched via | Affected versions | Fixed in | Patch Status |
|---|---|---|---|---|---|
| Zyxel | Zyxel AX7501-B0 | — |
versionEndExcluding=5.17\(abpc.7.2\)c0 | 5.17\(abpc.7.2\)c0 | Patched |