Improper Encoding Vulnerability in Zyxel WRE6505 Wireless Extender

CVE-2026-6058

What is CVE-2026-6058?

An improper encoding or escaping vulnerability exists in the CGI program of Zyxel WRE6505 v2 firmware. This flaw can be exploited by an adjacent attacker on the WLAN by persuading an authenticated administrator to access the 'AP Select' page while a malformed SSID is present, potentially leading to a denial-of-service (DoS) condition in the web management interface.

References