← Database

CVE-2026-7256

HIGH CVSS: 8.8 Published: 2026-05-12 Modified: 2026-06-17

Description

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to execute operating system (OS) commands on a vulnerable device by sending a crafted HTTP request.

Affected Platforms

Zyxel Wre6505Zyxel Wre6505 Firmware

Weakness Type

CWE-78

References