Command Injection Vulnerability in Zyxel WRE6505 v2 Firmware

CVE-2026-7256

What is CVE-2026-7256?

A command injection vulnerability exists in the CGI program of Zyxel's WRE6505 v2 firmware, specifically in version V1.00(ABDV.3)C0. This flaw allows an adjacent attacker on the local network to send specially crafted HTTP requests, potentially enabling the execution of arbitrary operating system commands on the affected device. Such a vulnerability poses risks related to unauthorized access and control of networked devices, highlighting the importance of timely firmware updates and security measures.

References