CVE-2025-11730

Name of the Vulnerable Software and Affected Versions Zyxel ATP series versions V5.35 through V5.41 Zyxel USG FLEX series versions V5.35 through V5.41 Zyxel USG FLEX 50(W) series versions V5.35 through V5.41 Zyxel USG20(W)-VPN series versions V5.35 through V5.41

Description A post-authentication command injection issue exists in the Dynamic DNS (DDNS) configuration command-line interface (CLI) command. An authenticated attacker with administrator privileges can execute operating system (OS) commands on an affected device by providing a specially crafted string as an argument to the CLI command.

Recommendations Zyxel ATP series versions prior to V5.35 and after V5.41 Zyxel USG FLEX series versions prior to V5.35 and after V5.41 Zyxel USG FLEX 50(W) series versions prior to V5.35 and after V5.41 Zyxel USG20(W)-VPN series versions prior to V5.35 and after V5.41