CVE-2026-0711
Summary
| CVE | CVE-2026-0711 |
|---|---|
| State | PUBLISHED |
| Assigner | Zyxel |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-04-28 03:16:02 UTC |
| Updated | 2026-07-08 15:26:09 UTC |
| Description | A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device. |
Risk And Classification
Primary CVSS: v3.1 6.8 MEDIUM from [email protected]
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.008490000 probability, percentile 0.537770000 (date 2026-07-09)
Problem Types: CWE-78 | CWE-78 CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Secondary | 6.8 | MEDIUM | CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | CNA | CVSS | 6.8 | MEDIUM | CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
CVSS v3.1 Breakdown
Attack Vector
AdjacentAttack Complexity
LowPrivileges Required
HighUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Zyxel | Ax7501-b0 | - | All | All | All |
| Operating System | Zyxel | Ax7501-b0 Firmware | All | All | All | All |
| Hardware | Zyxel | Ax7501-b1 | - | All | All | All |
| Operating System | Zyxel | Ax7501-b1 Firmware | All | All | All | All |
| Hardware | Zyxel | Dx3300-t0 | - | All | All | All |
| Operating System | Zyxel | Dx3300-t0 Firmware | All | All | All | All |
| Hardware | Zyxel | Dx3300-t1 | - | All | All | All |
| Operating System | Zyxel | Dx3300-t1 Firmware | All | All | All | All |
| Hardware | Zyxel | Dx3301-t0 | - | All | All | All |
| Operating System | Zyxel | Dx3301-t0 Firmware | All | All | All | All |
| Hardware | Zyxel | Dx5401-b0 | - | All | All | All |
| Operating System | Zyxel | Dx5401-b0 Firmware | All | All | All | All |
| Hardware | Zyxel | Dx5401-b1 | - | All | All | All |
| Operating System | Zyxel | Dx5401-b1 Firmware | All | All | All | All |
| Hardware | Zyxel | Ee3301-00 | - | All | All | All |
| Operating System | Zyxel | Ee3301-00 Firmware | All | All | All | All |
| Hardware | Zyxel | Ee5301-00 | - | All | All | All |
| Operating System | Zyxel | Ee5301-00 Firmware | All | All | All | All |
| Hardware | Zyxel | Ee6510-10 | - | All | All | All |
| Operating System | Zyxel | Ee6510-10 Firmware | All | All | All | All |
| Hardware | Zyxel | Emg3525-t50b | - | All | All | All |
| Operating System | Zyxel | Emg3525-t50b Firmware | All | All | All | All |
| Hardware | Zyxel | Emg5523-t50b | - | All | All | All |
| Operating System | Zyxel | Emg5523-t50b Firmware | All | All | All | All |
| Hardware | Zyxel | Ex3300-t0 | - | All | All | All |
| Operating System | Zyxel | Ex3300-t0 Firmware | All | All | All | All |
| Hardware | Zyxel | Ex3300-t1 | - | All | All | All |
| Operating System | Zyxel | Ex3300-t1 Firmware | All | All | All | All |
| Hardware | Zyxel | Ex3301-t0 | - | All | All | All |
| Operating System | Zyxel | Ex3301-t0 Firmware | All | All | All | All |
| Hardware | Zyxel | Ex3500-t0 | - | All | All | All |
| Operating System | Zyxel | Ex3500-t0 Firmware | All | All | All | All |
| Hardware | Zyxel | Ex3501-t0 | - | All | All | All |
| Operating System | Zyxel | Ex3501-t0 Firmware | All | All | All | All |
| Hardware | Zyxel | Ex3600-t0 | - | All | All | All |
| Operating System | Zyxel | Ex3600-t0 Firmware | All | All | All | All |
| Hardware | Zyxel | Ex5401-b0 | - | All | All | All |
| Operating System | Zyxel | Ex5401-b0 Firmware | All | All | All | All |
| Hardware | Zyxel | Ex5401-b1 | - | All | All | All |
| Operating System | Zyxel | Ex5401-b1 Firmware | All | All | All | All |
| Hardware | Zyxel | Ex5512-t0 | - | All | All | All |
| Operating System | Zyxel | Ex5512-t0 Firmware | All | All | All | All |
| Hardware | Zyxel | Ex5601-t0 | - | All | All | All |
| Operating System | Zyxel | Ex5601-t0 Firmware | All | All | All | All |
| Hardware | Zyxel | Ex5601-t1 | - | All | All | All |
| Operating System | Zyxel | Ex5601-t1 Firmware | All | All | All | All |
| Hardware | Zyxel | Ex7501-b0 | - | All | All | All |
| Operating System | Zyxel | Ex7501-b0 Firmware | All | All | All | All |
| Hardware | Zyxel | Nebula Fwa515 | - | All | All | All |
| Operating System | Zyxel | Nebula Fwa515 Firmware | All | All | All | All |
| Hardware | Zyxel | Nr5307 | - | All | All | All |
| Operating System | Zyxel | Nr5307 Firmware | All | All | All | All |
| Hardware | Zyxel | Pe3301-00 | - | All | All | All |
| Operating System | Zyxel | Pe3301-00 Firmware | All | All | All | All |
| Hardware | Zyxel | Pe5301-01 | - | All | All | All |
| Operating System | Zyxel | Pe5301-01 Firmware | All | All | All | All |
| Hardware | Zyxel | Px5301-t0 | - | All | All | All |
| Operating System | Zyxel | Px5301-t0 Firmware | All | All | All | All |
| Hardware | Zyxel | Px5302-00 | - | All | All | All |
| Operating System | Zyxel | Px5302-00 Firmware | All | All | All | All |
| Hardware | Zyxel | Vmg3625-t50b | - | All | All | All |
| Operating System | Zyxel | Vmg3625-t50b Firmware | All | All | All | All |
| Hardware | Zyxel | Vmg8623-t50b | - | All | All | All |
| Operating System | Zyxel | Vmg8623-t50b Firmware | All | All | All | All |
| Hardware | Zyxel | We3300-00 | - | All | All | All |
| Operating System | Zyxel | We3300-00 Firmware | All | All | All | All |
| Hardware | Zyxel | We4600-00 | - | All | All | All |
| Operating System | Zyxel | We4600-00 Firmware | All | All | All | All |
| Hardware | Zyxel | Wx3100-t0 | - | All | All | All |
| Operating System | Zyxel | Wx3100-t0 Firmware | All | All | All | All |
| Hardware | Zyxel | Wx5600-t0 | - | All | All | All |
| Operating System | Zyxel | Wx5600-t0 Firmware | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Zyxel | DX3300-T0 Firmware | affected <= 5.50(ABVY.7.1)C0 | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory... | [email protected] | www.zyxel.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.