Zyxel Wre6505 Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Zyxel Wre6505 Firmware: 4 record(s), with affected versions and fixes.
cpe:2.3:o:zyxel:wre6505_firmware

CVE-2026-7257 Medium · 4.4 CWE-922 May 12, 2026

Insecure Storage of Sensitive Information in Zyxel Wre6505 Firmware

** UNSUPPORTED WHEN ASSIGNED ** An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow a local attacker with administrator privileges to download and decrypt a backup configuration file.

CVE-2026-7256 High · 8.8 CWE-78 May 12, 2026

OS Command Injection in Zyxel Wre6505 Firmware

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to execute operating system (OS) commands on a vulnerable device by sending a crafted HTTP request.

CVE-2026-7255 Medium · 6.5 CWE-307 May 12, 2026

Improper Restriction of Excessive Authentication Attempts in Zyxel Wre6505 Firmware

** UNSUPPORTED WHEN ASSIGNED ** An improper restriction of excessive authentication attempts vulnerability in the web management interface of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to brute-force the password and bypass authentication.

CVE-2026-6058 Medium · 5.7 CWE-116 Apr 20, 2026

Improper Encoding or Escaping of Output in Zyxel Wre6505 Firmware

** UNSUPPORTED WHEN ASSIGNED ** An improper encoding or escaping vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the WLAN to cause a denial-of-service (DoS) condition in the web management interface by convincing an authenticated administrator to visit the “AP Select” page while a malformed SSID is present.