vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-4795

MEDIUM
6.5
CVSS Score
Published: May 26, 2026 at 01:42 AM UTC
Updated: July 24, 2026 at 11:23 AM UTC
5 products affected across 1 vendorGs1200-8hpv3Gs1200-8v3Gs1200-10v3

Using GS1200-5v3 firmware by Zyxel?

Get instant alerts when new vulnerabilities affect GS1200-5v3 firmware - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00(ACPS.2)C0, GS1200-8v3 firmware versions through 1.00(ACPT.2)C0,  GS1200-5HPv3 firmware versions through 1.00(ACPU.2)C0, GS1200-8HPv3 firmware versions through 1.00(ACPV.2)C0, and GS1200-10v3 firmware versions through 1.00(ACPW.2)C0 could allow a LAN-based, unauthenticated attacker to read the system configuration from a log file via a crafted HTTP request.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Gs1200-10v3· Zyxel
60%
v ≤ 1.00
Gs1200-5hpv3· Zyxel
60%
v ≤ 1.00
Gs1200-5v3· Zyxel
60%
v ≤ 1.00
Gs1200-8hpv3· Zyxel
60%
v ≤ 1.00
Gs1200-8v3· Zyxel
60%
v ≤ 1.00

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

Vendor Advisory
Source: cverecord
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-missing-authorization-vulnerability-in-gs1200v3-series-switches-05-26-2026

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

6.5MEDIUMZyxel
Attack Vector
ADJACENT_NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusDEFERRED
CWE
CWE-862

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card