PT-2026-67634 · Zyxel · Wax650S Firmware

CVE-2026-8508 · Publicado 2026-08-04 · Atualizado 2026-08-04

Mitre

CVSS v3.1

6.5

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

An improper authentication vulnerability in the "social login.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an attacker on the WLAN to bypass captive portal authentication.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2026-8508

Produtos afetados

Wax650S Firmware

Referências · 2

• https://zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-improper-authentication-vulnerabilities-in-certain-aps-fwa7-and-security-routers-08-04-2026 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-8508 · Nota de Segurança