Zyxel
13 Zyxel flaws are on CISA's list of vulnerabilities attackers have used, 1 of them added in 2026. CISA says 2 are known to be used by ransomware. The latest was added Sep 21, 2026.
13on CISA's list, all time
1added in 2026
1in the last 90 days
2used by ransomware
5zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| Multiple Firewalls | 5 | Dec 3, 2024 |
| DSL CPE Devices | 2 | Feb 11, 2025 |
| Multiple Network-Attached Storage (NAS) Devices | 2 | Jun 23, 2023 |
| GS1900 Series Switches | 1 | Sep 21, 2026 |
| EMG2926 Routers | 1 | Sep 18, 2023 |
| P660HN-T1A Routers | 1 | Aug 7, 2023 |
| Multiple Products | 1 | Nov 3, 2021 |
Latest Zyxel flaws
- GS1900 Series SwitchesZyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
- DSL CPE DevicesZyxel DSL CPE OS Command Injection Vulnerability
- DSL CPE DevicesZyxel DSL CPE OS Command Injection Vulnerability
- Multiple FirewallsZyxel Multiple Firewalls Path Traversal Vulnerability
- EMG2926 RoutersZyxel EMG2926 Routers Command Injection Vulnerability
- P660HN-T1A RoutersZyxel P660HN-T1A Routers Command Injection Vulnerability
- Multiple Network-Attached Storage (NAS) DevicesZyxel Multiple NAS Devices Command Injection Vulnerability
- Multiple FirewallsZyxel Multiple Firewalls Buffer Overflow Vulnerability
- Multiple FirewallsZyxel Multiple Firewalls Buffer Overflow Vulnerability
- Multiple FirewallsZyxel Multiple Firewalls OS Command Injection Vulnerability
- Multiple FirewallsZyxel Multiple Firewalls OS Command Injection Vulnerability
- Multiple Network-Attached Storage (NAS) DevicesZyxel Multiple NAS Devices OS Command Injection Vulnerability
- Multiple ProductsZyxel Multiple Products Use of Hard-Coded Credentials Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.