CVE-2026-76955

High

Description

A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could allow a LAN-based attacker to escalate privileges on an affected device.

SeverityHigh

CVSS8.8

Exploit probability—

Product

NWA110AX firmware

PublishedNov 3, 2026

First seenNov 4, 2026

Weakness typeCWE-120CWE-120

How to fix

Vendor advisories

zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerability-in-certain-aps-fwa7-and-security-routers-11-03-2026

Affected products

Product	Affected versions	Fixed in
Zyxel NWA110AX firmware	<= 7.12(ABTG.0)C0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.