← Vulnerability feed

Vulnerability record · CVE-2024-7261 · published 3 September 2024

CVE-2024-7261: Zyxel nwa110ax firmware os command injection vulnerability

Zyxel · Nwa110ax Firmware

The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4) and earlier, WAC500 firmware version 6.70(ABVS.4) and earlier, WAX655E firmware version 7.00(ACDO.1) and earlier, WBE530 firmware version 7.00(ACLE.1) and earlier, and USG LITE 60AX firmware version V2.00(ACIP.2) could allow an unauthenticated attacker to execute OS commands by sending a crafted cookie to a vulnerable device.

9.8 CVSS 3.1 Critical EPSS 11% · top 4.1% CWE-78 · OS command injection
9.8CVSS 3.1 base score
11%EPSS exploitation probability, 30 days
NoNot in CISA KEV
29Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70(ABVT.4) and earlier, WAC500 firmware version 6.70(ABVS.4) and earlier, WAX655E firmware version 7.00(ACDO.1) and earlier, WBE530 firmware version 7.00(ACLE.1) and earlier, and USG LITE 60AX firmware version V2.00(ACIP.2) could allow an unauthenticated attacker to execute OS commands by sending a crafted cookie to a vulnerable device.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

29 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-os-command-injection-vulnerabili Vendor Advisory

Track CVE-2024-7261 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2024-12398Zyxel nwa50ax firmware improper privilege management vulnerabilityAn improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and WBE660S…EPSS 0.54%7.8CVE-2022-26531Zyxel vpn100 firmware improper input validation vulnerabilityMultiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLE…EPSS 6.2%7.8CVE-2022-26532Zyxel vpn100 firmware argument injection vulnerabilityA argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series …EPSS 4.8%7.2CVE-2025-6265Zyxel nwa50ax firmware path traversal vulnerabilityA path traversal vulnerability in the file_upload-cgi CGI program of Zyxel NWA50AX PRO firmware version 7.10(ACGE.2) and earlier could allow an authe…EPSS 0.53%7.2CVE-2023-6398Zyxel atp100 firmware os command injection vulnerabilityA post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1,…EPSS 1.3%6.5CVE-2024-1575Zyxel nwa50ax firmware improper privilege management vulnerabilityThe improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated …EPSS 0.32%6.5CVE-2023-22918Zyxel atp200 firmware vulnerabilityA post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series …EPSS 0.77%5.5CVE-2023-5797Zyxel zld improper privilege management vulnerabilityAn improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series …EPSS 0.21%

Source: NIST National Vulnerability Database (record CVE-2024-7261), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.