CVE-2026-7256: Wre6505 Firmware: işletim sistemi komut enjeksiyonu

Açıklama (NVD)

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to execute operating system (OS) commands on a vulnerable device by sending a crafted HTTP request.

Özet bilgiler

Ürün

Zyxel Wre6505 Firmware

CVSS v3.1

8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

%1,01 (yüzdelik 63)

CWE

CWE-78

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• www.zyxel.com
• CWE-78