# Zyxel USG FLEX 50(W) series firmware.

Every CVE that names Zyxel USG FLEX 50(W) series firmware among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Path traversal in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2026-14818.md)
  `CVE-2026-14818` · CVE record: Zyxel ATP series firmware and 3 more · CVSS 7.2 High · Not analysed yet · Published 4 Aug 2026 · Tags: Path traversal
- [OS command injection in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2025-11730.md)
  `CVE-2025-11730` · CVE record: Zyxel ATP series firmware and 3 more · CVSS 7.2 High · Not analysed yet · Published 5 Feb 2026 · Tags: Command injection
- [Missing authorization in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2025-9133.md)
  `CVE-2025-9133` · CVE record: Zyxel ATP series firmware and 3 more · CVSS 8.1 High · Not analysed yet · Published 21 Oct 2025 · Tags: Broken access control
- [OS command injection in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2025-8078.md)
  `CVE-2025-8078` · CVE record: Zyxel ATP series firmware and 3 more · CVSS 7.2 High · Not analysed yet · Published 21 Oct 2025 · Tags: Command injection
- [Path traversal in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2024-11667.md)
  `CVE-2024-11667` · CVE record: Zyxel ATP series firmware and 3 more · CVSS 7.5 High · Critical (KEV) · In CISA KEV, ransomware · Not analysed yet · Published 27 Nov 2024 · Tags: Path traversal
- [Cross-site scripting in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2024-42061.md)
  `CVE-2024-42061` · CVE record: Zyxel ATP series firmware and 3 more · CVSS 6.1 Medium · Not analysed yet · Published 3 Sept 2024 · Tags: Cross-site scripting (XSS)
- [OS command injection in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2024-42060.md)
  `CVE-2024-42060` · CVE record: Zyxel ATP series firmware and 3 more · CVSS 7.2 High · Not analysed yet · Published 3 Sept 2024 · Tags: Command injection
- [OS command injection in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2024-42059.md)
  `CVE-2024-42059` · CVE record: Zyxel ATP series firmware and 3 more · CVSS 7.2 High · Not analysed yet · Published 3 Sept 2024 · Tags: Command injection
- [NULL pointer dereference in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2024-42058.md)
  `CVE-2024-42058` · CVE record: Zyxel ATP series firmware and 3 more · CVSS 7.5 High · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption
- [OS command injection in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2024-42057.md)
  `CVE-2024-42057` · CVE record: Zyxel ATP series firmware and 3 more · CVSS 8.1 High · Not analysed yet · Published 3 Sept 2024 · Tags: Command injection
- [Buffer overflow in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2024-6343.md)
  `CVE-2024-6343` · CVE record: Zyxel ATP series firmware and 3 more · CVSS 4.9 Medium · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption
- [Uncontrolled format string in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2023-6764.md)
  `CVE-2023-6764` · CVE record: Zyxel ATP series firmware and 3 more · CVSS 8.1 High · Not analysed yet · Published 20 Feb 2024 · Tags: Memory corruption
- [Uncontrolled format string in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2023-6399.md)
  `CVE-2023-6399` · CVE record: Zyxel ATP series firmware and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: Memory corruption
- [OS command injection in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2023-6398.md)
  `CVE-2023-6398` · CVE record: Zyxel ATP series firmware and 4 more · CVSS 7.2 High · Not analysed yet · Published 20 Feb 2024 · Tags: Command injection
- [Improper privilege management in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2023-5797.md)
  `CVE-2023-5797` · CVE record: Zyxel ATP series firmware and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 28 Nov 2023 · Tags: Privilege escalation
- [Improper privilege management in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2023-5650.md)
  `CVE-2023-5650` · CVE record: Zyxel ATP series firmware and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 28 Nov 2023 · Tags: Privilege escalation
- [Integer overflow in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2023-4398.md)
  `CVE-2023-4398` · CVE record: Zyxel ATP series firmware and 4 more · CVSS 7.5 High · Not analysed yet · Published 28 Nov 2023 · Tags: Memory corruption
- [Buffer overflow in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2023-4397.md)
  `CVE-2023-4397` · CVE record: Zyxel ATP series firmware and 3 more · CVSS 4.4 Medium · Not analysed yet · Published 28 Nov 2023 · Tags: Memory corruption
- [Buffer overflow in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2023-37926.md)
  `CVE-2023-37926` · CVE record: Zyxel ATP series firmware and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 28 Nov 2023 · Tags: Memory corruption
- [Improper privilege management in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2023-37925.md)
  `CVE-2023-37925` · CVE record: Zyxel ATP series firmware and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 28 Nov 2023 · Tags: Privilege escalation
- [Cross-site scripting in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2023-35139.md)
  `CVE-2023-35139` · CVE record: Zyxel ATP series firmware and 4 more · CVSS 5.2 Medium · Not analysed yet · Published 28 Nov 2023 · Tags: Cross-site scripting (XSS)
- [Improper input validation in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2023-35136.md)
  `CVE-2023-35136` · CVE record: Zyxel ATP series firmware and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 28 Nov 2023 · Tags: CWE-20
- [OS command injection in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2023-34141.md)
  `CVE-2023-34141` · CVE record: Zyxel ATP series firmware and 4 more · CVSS 8.0 High · Not analysed yet · Published 17 Jul 2023 · Tags: Command injection
- [Buffer overflow in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2023-34140.md)
  `CVE-2023-34140` · CVE record: Zyxel ATP series firmware and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 17 Jul 2023 · Tags: Memory corruption
- [OS command injection in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2023-34138.md)
  `CVE-2023-34138` · CVE record: Zyxel ATP series firmware and 4 more · CVSS 8.0 High · Not analysed yet · Published 17 Jul 2023 · Tags: Command injection
- [OS command injection in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2023-33012.md)
  `CVE-2023-33012` · CVE record: Zyxel ATP series firmware and 4 more · CVSS 8.8 High · Not analysed yet · Published 17 Jul 2023 · Tags: Command injection
- [Uncontrolled format string in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2023-33011.md)
  `CVE-2023-33011` · CVE record: Zyxel ATP series firmware and 4 more · CVSS 8.8 High · Not analysed yet · Published 17 Jul 2023 · Tags: Memory corruption
- [OS command injection in Zyxel ATP series firmware and others](https://agentprime.io/advisories/CVE-2023-28767.md)
  `CVE-2023-28767` · CVE record: Zyxel ATP series firmware and 4 more · CVSS 8.8 High · Not analysed yet · Published 17 Jul 2023 · Tags: Command injection

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=zyxel-usg-flex-50-w-series-firmware>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/zyxel-usg-flex-50-w-series-firmware/>. Everything for agents: <https://agentprime.io/llms.txt>.