Zyxel Nebula Nr7101 Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Zyxel Nebula Nr7101 Firmware: 2 record(s), with affected versions and fixes.
cpe:2.3:o:zyxel:nebula_nr7101_firmware

CVE-2026-1460 High · 7.2 CWE-78 Apr 28, 2026

OS Command Injection in Zyxel Nebula Fwa70 Firmware

A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device.

CVE-2025-13942 Critical · 9.8 CWE-78 Feb 24, 2026

OS Command Injection in Zyxel Wx5610-b0 Firmware

A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating system (OS) commands on an affected device by sending specially crafted UPnP SOAP requests.