CVE-2026-7255

** UNSUPPORTED WHEN ASSIGNED ** An improper restriction of excessive authentication attempts vulnerability in the web management interface of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to brute-force the password and bypass authentication.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.zyxel.com/global/en/support/end-of-life	Product

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:zyxel:wre6505_firmware:v1.00\(abdv.3\)c0:*:*:*:*:*:*:*

cpe:2.3:h:zyxel:wre6505:v2:*:*:*:*:*:*:*

History

26 Oct 2026, 18:10

Type	Values Removed	Values Added
Summary		(es) NO SOPORTADO CUANDO ASIGNADO Una vulnerabilidad de restricción inadecuada de intentos excesivos de autenticación en la interfaz de gestión web del firmware versión V1.00(ABDV.3)C0 del Zyxel WRE6505 v2 podría permitir a un atacante adyacente en la LAN forzar la contraseña por fuerza bruta y eludir la autenticación.

Information

Published : 2026-05-12 04:16

Updated : 2026-10-26 18:10

NVD link : CVE-2026-7255

Mitre link : CVE-2026-7255

CVE.ORG link : CVE-2026-7255

JSON object : View

Products Affected

zyxel

wre6505
wre6505_firmware

CWE

CWE-307

Improper Restriction of Excessive Authentication Attempts

{"id": "CVE-2026-7255", "cveTags": [{"tags": ["unsupported-when-assigned"], "sourceIdentifier": "security@zyxel.com.tw"}], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-7255", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-12T12:50:07.868941Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@zyxel.com.tw", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security@zyxel.com.tw", "affectedData": [{"vendor": "Zyxel", "product": "WRE6505 v2 firmware", "versions": [{"status": "affected", "version": "V1.00(ABDV.3)C0"}], "defaultStatus": "unaffected"}]}], "published": "2026-05-12T04:16:29.143", "references": [{"url": "https://www.zyxel.com/global/en/support/end-of-life", "tags": ["Product"], "source": "security@zyxel.com.tw"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@zyxel.com.tw", "description": [{"lang": "en", "value": "CWE-307"}]}], "descriptions": [{"lang": "en", "value": "** UNSUPPORTED WHEN ASSIGNED ** An improper restriction of excessive authentication attempts vulnerability in the web management interface of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to brute-force the password and bypass authentication."}, {"lang": "es", "value": " NO SOPORTADO CUANDO ASIGNADO Una vulnerabilidad de restricci\u00f3n inadecuada de intentos excesivos de autenticaci\u00f3n en la interfaz de gesti\u00f3n web del firmware versi\u00f3n V1.00(ABDV.3)C0 del Zyxel WRE6505 v2 podr\u00eda permitir a un atacante adyacente en la LAN forzar la contrase\u00f1a por fuerza bruta y eludir la autenticaci\u00f3n."}], "lastModified": "2026-10-26T18:10:00.173", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zyxel:wre6505_firmware:v1.00\\(abdv.3\\)c0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6CCCBD5B-877B-4050-83AB-33E29C86A399"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zyxel:wre6505:v2:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "80D82EE7-F4EF-46FA-9D1D-C7EC6159E74E"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@zyxel.com.tw"}