vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-0711

MEDIUM
6.8
CVSS Score
Published: April 28, 2026 at 01:57 AM UTC
Updated: July 25, 2026 at 11:21 AM UTC
72 products affected across 1 vendorEmg3525-t50b FirmwareEmg5523-t50b FirmwareVmg8623-t50b Firmware

Using DX3300-T0 firmware by Zyxel?

Get instant alerts when new vulnerabilities affect DX3300-T0 firmware - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.8
Exploit prediction
EPSS 0.8%
SSVC
No known exploit

Description

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

AX7501-B0 firmware· Zyxel
95%
v < 5.17(abpc.7.2)c0
Affected range stops below 5.17(abpc.7.2)c0, so it looks safe — our inference, not a vendor statement
zyxel-ax7501-b0 (same device)
Ax7501-b1 Firmware· Zyxel
95%
v < 5.17(abpc.7.2)c0
Affected range stops below 5.17(abpc.7.2)c0, so it looks safe — our inference, not a vendor statement
DX3300-T0 firmware· Zyxel
95%
v ≤ 5.50v < 5.50(abvy.7.2)c0
Affected range stops below 5.50(abvy.7.2)c0, so it looks safe — our inference, not a vendor statement
zyxel-dx3300-t0 (same device)
DX3300-T1 firmware· Zyxel
95%
v < 5.50(abvy.7.2)c0
Affected range stops below 5.50(abvy.7.2)c0, so it looks safe — our inference, not a vendor statement
zyxel-dx3300-t1 (same device)
DX3301-T0 firmware· Zyxel
95%
v < 5.50(abvy.7.2)c0
Affected range stops below 5.50(abvy.7.2)c0, so it looks safe — our inference, not a vendor statement
zyxel-dx3301-t0 (same device)
DX5401-B0 firmware· Zyxel
95%
v < 5.17(abyo.7.2)c0
Affected range stops below 5.17(abyo.7.2)c0, so it looks safe — our inference, not a vendor statement
zyxel-dx5401-b0 (same device)
Dx5401-b1 Firmware· Zyxel
95%
v < 5.17(abyo.7.2)c0
Affected range stops below 5.17(abyo.7.2)c0, so it looks safe — our inference, not a vendor statement
zyxel-dx5401-b1 (same device)
Ee3301-00 Firmware· Zyxel
95%
v < 5.63(acmu.3.1)c0
Affected range stops below 5.63(acmu.3.1)c0, so it looks safe — our inference, not a vendor statement
zyxel-ee3301-00 (same device)
Ee5301-00 Firmware· Zyxel
95%
v < 5.63(acld.3.1)c0
Affected range stops below 5.63(acld.3.1)c0, so it looks safe — our inference, not a vendor statement
zyxel-ee5301-00 (same device)
Ee6510-10 Firmware· Zyxel
95%
v < 5.19(acjq.4.2)c0
Affected range stops below 5.19(acjq.4.2)c0, so it looks safe — our inference, not a vendor statement
zyxel-ee6510-10 (same device)

References (1)

Vendor Advisory
Source: cverecord
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-and-wireless-extenders-04-28-2026

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

6.8MEDIUMZyxel
Attack Vector
ADJACENT_NETWORK
Complexity
LOW
Privileges
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-78

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card