CVE-2026-0711

Medium

Description

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device.

SeverityMedium

CVSS6.8

Exploit probability—

Product

Zyxel Dx3300-t0 Firmware

PublishedApr 28, 2026

First seenApr 28, 2026

Weakness typeCWE-78OS command injection

How to fix

Update

zyxel dx3300-t0_firmware5.50\(abvy.7.2\)c0 or later
zyxel nr5307_firmware2.00\(acjt.3\)c0 or later
zyxel nebula_fwa515_firmware1.60\(acpz.0\)v0 or later
zyxel dx3300-t1_firmware5.50\(abvy.7.2\)c0 or later
zyxel dx3301-t0_firmware5.50\(abvy.7.2\)c0 or later
zyxel dx5401-b0_firmware5.17\(abyo.7.2\)c0 or later
zyxel dx5401-b1_firmware5.17\(abyo.7.2\)c0 or later
zyxel ee3301-00_firmware5.63\(acmu.3.1\)c0 or later
zyxel ee5301-00_firmware5.63\(acld.3.1\)c0 or later
zyxel ee6510-10_firmware5.19\(acjq.4.2\)c0 or later
zyxel emg3525-t50b_firmware5.50\(abpm.9.8\)c0 or later
zyxel emg5523-t50b_firmware5.50\(abpm.9.8\)c0 or later

Vendor advisories

zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-and-wireless-extenders-04-28-2026

Affected products

Product	Affected versions	Fixed in
zyxel dx3300-t0_firmware	v < 5.50\(abvy.7.2\)c0	5.50\(abvy.7.2\)c0
zyxel nr5307_firmware	v < 2.00\(acjt.3\)c0	2.00\(acjt.3\)c0
zyxel nebula_fwa515_firmware	v < 1.60\(acpz.0\)v0	1.60\(acpz.0\)v0
zyxel dx3300-t1_firmware	v < 5.50\(abvy.7.2\)c0	5.50\(abvy.7.2\)c0
zyxel dx3301-t0_firmware	v < 5.50\(abvy.7.2\)c0	5.50\(abvy.7.2\)c0
zyxel dx5401-b0_firmware	v < 5.17\(abyo.7.2\)c0	5.17\(abyo.7.2\)c0
zyxel dx5401-b1_firmware	v < 5.17\(abyo.7.2\)c0	5.17\(abyo.7.2\)c0
zyxel ee3301-00_firmware	v < 5.63\(acmu.3.1\)c0	5.63\(acmu.3.1\)c0
zyxel ee5301-00_firmware	v < 5.63\(acld.3.1\)c0	5.63\(acld.3.1\)c0
zyxel ee6510-10_firmware	v < 5.19\(acjq.4.2\)c0	5.19\(acjq.4.2\)c0
zyxel emg3525-t50b_firmware	v < 5.50\(abpm.9.8\)c0	5.50\(abpm.9.8\)c0
zyxel emg5523-t50b_firmware	v < 5.50\(abpm.9.8\)c0	5.50\(abpm.9.8\)c0
zyxel ex3300-t0_firmware	v < 5.50\(abvy.7.2\)c0	5.50\(abvy.7.2\)c0
zyxel ex3300-t1_firmware	v < 5.50\(abvy.7.2\)c0	5.50\(abvy.7.2\)c0
zyxel ex3301-t0_firmware	v < 5.50\(abvy.7.2\)c0	5.50\(abvy.7.2\)c0
zyxel ex3500-t0_firmware	v < 5.44\(achr.6\)c0	5.44\(achr.6\)c0
zyxel ex3501-t0_firmware	v < 5.44\(achr.6\)c0	5.44\(achr.6\)c0
zyxel ex3600-t0_firmware	v < 5.70\(acif.3\)c0	5.70\(acif.3\)c0
zyxel ex5401-b0_firmware	v < 5.17\(abyo.7.2\)c0	5.17\(abyo.7.2\)c0
zyxel ex5401-b1_firmware	v < 5.17\(abyo.7.2\)c0	5.17\(abyo.7.2\)c0
zyxel ex5512-t0_firmware	v < 5.70\(aceg.5.5\)c0	5.70\(aceg.5.5\)c0
zyxel ex5601-t0_firmware	v < 5.70\(acdz.6\)c0	5.70\(acdz.6\)c0
zyxel ex5601-t1_firmware	v < 5.70\(acdz.6\)c0	5.70\(acdz.6\)c0
zyxel ex7501-b0_firmware	v < 5.18\(achn.3.2\)c0	5.18\(achn.3.2\)c0
zyxel vmg3625-t50b_firmware	v < 5.50\(abpm.9.8\)c0	5.50\(abpm.9.8\)c0
zyxel vmg8623-t50b_firmware	v < 5.50\(abpm.9.8\)c0	5.50\(abpm.9.8\)c0
zyxel ax7501-b0_firmware	v < 5.17\(abpc.7.2\)c0	5.17\(abpc.7.2\)c0
zyxel ax7501-b1_firmware	v < 5.17\(abpc.7.2\)c0	5.17\(abpc.7.2\)c0
zyxel pe3301-00_firmware	v < 5.63\(acmt.3.1\)c0	5.63\(acmt.3.1\)c0
zyxel pe5301-01_firmware	v < 5.63\(acoj.3.1\)c0	5.63\(acoj.3.1\)c0
zyxel px5302-00_firmware	v < 5.44\(acnm.0.1\)c0	5.44\(acnm.0.1\)c0
zyxel px5301-t0_firmware	v < 5.44\(ackb.0.7\)c0	5.44\(ackb.0.7\)c0
zyxel we3300-00_firmware	v < 5.70\(acka.2\)c0	5.70\(acka.2\)c0
zyxel wx3100-t0_firmware	v < 5.50\(abvl.4.10\)c0	5.50\(abvl.4.10\)c0
zyxel we4600-00_firmware	v < 6.70\(ackt.1\)c0	6.70\(ackt.1\)c0
zyxel wx5600-t0_firmware	v < 5.70\(aceb.6\)c0	5.70\(aceb.6\)c0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

ProductVersion

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.