Vulnerabilities (CVE)

Filtered by vendor Zyxel Subscribe

Filtered by product Wre6505 Firmware

Total 5 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2026-6058	1 Zyxel	2 Wre6505, Wre6505 Firmware	2026-07-08	N/A	4.5 MEDIUM
UNSUPPORTED WHEN ASSIGNED An improper encoding or escaping vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the WLAN to cause a denial-of-service (DoS) condition in the web management interface by convincing an authenticated administrator to visit the “AP Select” page while a malformed SSID is present.
CVE-2026-7257	1 Zyxel	2 Wre6505, Wre6505 Firmware	2026-06-17	N/A	4.4 MEDIUM
UNSUPPORTED WHEN ASSIGNED An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow a local attacker with administrator privileges to download and decrypt a backup configuration file.
CVE-2026-7256	1 Zyxel	2 Wre6505, Wre6505 Firmware	2026-06-17	N/A	8.8 HIGH
UNSUPPORTED WHEN ASSIGNED A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to execute operating system (OS) commands on a vulnerable device by sending a crafted HTTP request.
CVE-2026-7255	1 Zyxel	2 Wre6505, Wre6505 Firmware	2026-06-17	N/A	6.5 MEDIUM
UNSUPPORTED WHEN ASSIGNED An improper restriction of excessive authentication attempts vulnerability in the web management interface of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to brute-force the password and bypass authentication.
CVE-2017-7964	1 Zyxel	1 Wre6505 Firmware	2026-06-17	10.0 HIGH	10.0 CRITICAL
Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS hijacking attacks by reconfiguring the built-in dnshijacker process.