Advisories · Technology

Zyxel USG FLEX 50(W) series firmware.

Every CVE that names Zyxel USG FLEX 50(W) series firmware among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-14818 CVE record

CVSS 7.2 High

Path traversal in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Path traversal
Not analysed yet 4 Aug 2026
CVE-2025-11730 CVE record

CVSS 7.2 High

OS command injection in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Command injection
Not analysed yet 5 Feb 2026
CVE-2025-9133 CVE record

CVSS 8.1 High

Missing authorization in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Broken access control
Not analysed yet 21 Oct 2025
CVE-2025-8078 CVE record

CVSS 7.2 High

OS command injection in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Command injection
Not analysed yet 21 Oct 2025
CVE-2024-11667 CVE record

CVSS 7.5 HighCritical · KEVKEV · ransomware

Path traversal in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Path traversal
Not analysed yet 27 Nov 2024
CVE-2024-42061 CVE record

CVSS 6.1 Medium

Cross-site scripting in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Cross-site scripting (XSS)
Not analysed yet 3 Sept 2024
CVE-2024-42060 CVE record

CVSS 7.2 High

OS command injection in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Command injection
Not analysed yet 3 Sept 2024
CVE-2024-42059 CVE record

CVSS 7.2 High

OS command injection in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Command injection
Not analysed yet 3 Sept 2024
CVE-2024-42058 CVE record

CVSS 7.5 High

NULL pointer dereference in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Memory corruption
Not analysed yet 3 Sept 2024
CVE-2024-42057 CVE record

CVSS 8.1 High

OS command injection in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Command injection
Not analysed yet 3 Sept 2024
CVE-2024-6343 CVE record

CVSS 4.9 Medium

Buffer overflow in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Memory corruption
Not analysed yet 3 Sept 2024
CVE-2023-6764 CVE record

CVSS 8.1 High

Uncontrolled format string in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Memory corruption
Not analysed yet 20 Feb 2024
CVE-2023-6399 CVE record

CVSS 5.7 Medium

Uncontrolled format string in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Memory corruption
Not analysed yet 20 Feb 2024
CVE-2023-6398 CVE record

CVSS 7.2 High

OS command injection in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Command injection
Not analysed yet 20 Feb 2024
CVE-2023-5797 CVE record

CVSS 5.5 Medium

Improper privilege management in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Privilege escalation
Not analysed yet 28 Nov 2023
CVE-2023-5650 CVE record

CVSS 5.5 Medium

Improper privilege management in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Privilege escalation
Not analysed yet 28 Nov 2023
CVE-2023-4398 CVE record

CVSS 7.5 High

Integer overflow in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Memory corruption
Not analysed yet 28 Nov 2023
CVE-2023-4397 CVE record

CVSS 4.4 Medium

Buffer overflow in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Memory corruption
Not analysed yet 28 Nov 2023
CVE-2023-37926 CVE record

CVSS 5.5 Medium

Buffer overflow in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Memory corruption
Not analysed yet 28 Nov 2023
CVE-2023-37925 CVE record

CVSS 5.5 Medium

Improper privilege management in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Privilege escalation
Not analysed yet 28 Nov 2023
CVE-2023-35139 CVE record

CVSS 5.2 Medium

Cross-site scripting in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Cross-site scripting (XSS)
Not analysed yet 28 Nov 2023
CVE-2023-35136 CVE record

CVSS 5.5 Medium

Improper input validation in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- CWE-20
Not analysed yet 28 Nov 2023
CVE-2023-34141 CVE record

CVSS 8.0 High

OS command injection in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Command injection
Not analysed yet 17 Jul 2023
CVE-2023-34140 CVE record

CVSS 6.5 Medium

Buffer overflow in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Memory corruption
Not analysed yet 17 Jul 2023
CVE-2023-34138 CVE record

CVSS 8.0 High

OS command injection in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Command injection
Not analysed yet 17 Jul 2023
CVE-2023-33012 CVE record

CVSS 8.8 High

OS command injection in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Command injection
Not analysed yet 17 Jul 2023
CVE-2023-33011 CVE record

CVSS 8.8 High

Uncontrolled format string in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Memory corruption
Not analysed yet 17 Jul 2023
CVE-2023-28767 CVE record

CVSS 8.8 High

OS command injection in Zyxel ATP series firmware and others
- Zyxel ATP series firmware
- Zyxel USG FLEX series firmware
- Command injection
Not analysed yet 17 Jul 2023