CVE-2026-4795

Medium

Description

A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00(ACPS.2)C0, GS1200-8v3 firmware versions through 1.00(ACPT.2)C0, GS1200-5HPv3 firmware versions through 1.00(ACPU.2)C0, GS1200-8HPv3 firmware versions through 1.00(ACPV.2)C0, and GS1200-10v3 firmware versions through 1.00(ACPW.2)C0 could allow a LAN-based, unauthenticated attacker to read the system configuration from a log file via a crafted HTTP request.

SeverityMedium

CVSS6.5

Exploit probability—

Product

GS1200-5v3 firmware

PublishedMay 26, 2026

First seenMay 26, 2026

Weakness typeCWE-862Missing authorization

How to fix

Vendor advisories

zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-missing-authorization-vulnerability-in-gs1200v3-series-switches-05-26-2026

Affected products

Product	Affected versions	Fixed in
Zyxel GS1200-5v3 firmware	<= 1.00(ACPS.2)C0	—
Zyxel GS1200-8v3 firmware	<= 1.00(ACPT.2)C0	—
Zyxel GS1200-5HPv3 firmware	<= 1.00(ACPU.2)C0	—
Zyxel GS1200-8HPv3 firmware	<= 1.00(ACPV.2)C0	—
Zyxel GS1200-10v3 firmware	<= 1.00(ACPW.2)C0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.