Approved changes feed: RSS · Atom

cpe:2.3:a:zyxel:wax650s_firmware:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductWax650S Firmware (2758b340-2c67-5d24-bacc-a5dd367397bd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-6837 vulnerable 2026-09-16 04:34:08.576141 Details available
HIGH (7.2)
A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device.
Published: 2026-08-04T01:52:07.780Z
Updated: 2026-08-05T03:56:19.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8508 vulnerable 2026-09-16 04:32:58.395429 Details available
MEDIUM (6.5)
An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an attacker on the WLAN to bypass captive portal authentication.
Published: 2026-08-04T01:57:51.770Z
Updated: 2026-08-04T18:46:57.004Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.