PT-2026-39933 · Zyxel · Wre6505 V2

Published 2026-05-12 · Updated 2026-06-18 · CVE-2026-7256

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zyxel WRE6505 v2 version V1.00(ABDV.3)C0

Description A command injection flaw exists in the CGI program. An adjacent attacker on the local area network (LAN) can execute operating system commands on the device by sending a specially crafted HTTP request.

Recommendations Retire or isolate the device immediately.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-7256

Affected Products

Wre6505 V2

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-7256 · Security Note
• https://t.me/cveNotify/163171 · Telegram Post
• https://twitter.com/Tank23x0/status/2067638720933900296 · Twitter Post
• https://twitter.com/0x2ed3bb60/status/2054061115433513088 · Twitter Post
• https://t.me/CVEtracker/53460 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2054087143690027368 · Twitter Post
• https://zyxel.com/global/en/support/end-of-life · Note
• https://t.me/cveNotify/163730 · Telegram Post