CVE-2026-0711
MEDIUMCVSS 6.8/10EPSS 0.85%
Last modified
CVE-2026-0711 is a medium-severity vulnerability rated 6.8/10 on the CVSS scale. A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device.. EPSS estimates a 0.85% chance of exploitation in the next 30 days.
Description
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device.
Metrics
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Zyxel | Nr5307 Firmware | < 2.00\(acjt.3\)c0 |
| Zyxel | Nebula Fwa515 Firmware | < 1.60\(acpz.0\)v0 |
| Zyxel | Dx3300-T0 Firmware | < 5.50\(abvy.7.2\)c0 |
| Zyxel | Dx3300-T1 Firmware | < 5.50\(abvy.7.2\)c0 |
| Zyxel | Dx3301-T0 Firmware | < 5.50\(abvy.7.2\)c0 |
| Zyxel | Dx5401-B0 Firmware | < 5.17\(abyo.7.2\)c0 |
| Zyxel | Dx5401-B1 Firmware | < 5.17\(abyo.7.2\)c0 |
| Zyxel | Ee3301-00 Firmware | < 5.63\(acmu.3.1\)c0 |
| Zyxel | Ee5301-00 Firmware | < 5.63\(acld.3.1\)c0 |
| Zyxel | Ee6510-10 Firmware | < 5.19\(acjq.4.2\)c0 |
| Zyxel | Emg3525-T50b Firmware | < 5.50\(abpm.9.8\)c0 |
| Zyxel | Emg5523-T50b Firmware | < 5.50\(abpm.9.8\)c0 |
| Zyxel | Ex3300-T0 Firmware | < 5.50\(abvy.7.2\)c0 |
| Zyxel | Ex3300-T1 Firmware | < 5.50\(abvy.7.2\)c0 |
| Zyxel | Ex3301-T0 Firmware | < 5.50\(abvy.7.2\)c0 |
| Zyxel | Ex3500-T0 Firmware | < 5.44\(achr.6\)c0 |
| Zyxel | Ex3501-T0 Firmware | < 5.44\(achr.6\)c0 |
| Zyxel | Ex3600-T0 Firmware | < 5.70\(acif.3\)c0 |
| Zyxel | Ex5401-B0 Firmware | < 5.17\(abyo.7.2\)c0 |
| Zyxel | Ex5401-B1 Firmware | < 5.17\(abyo.7.2\)c0 |
| Zyxel | Ex5512-T0 Firmware | < 5.70\(aceg.5.5\)c0 |
| Zyxel | Ex5601-T0 Firmware | < 5.70\(acdz.6\)c0 |
| Zyxel | Ex5601-T1 Firmware | < 5.70\(acdz.6\)c0 |
| Zyxel | Ex7501-B0 Firmware | < 5.18\(achn.3.2\)c0 |
| Zyxel | Vmg3625-T50b Firmware | < 5.50\(abpm.9.8\)c0 |
| Zyxel | Vmg8623-T50b Firmware | < 5.50\(abpm.9.8\)c0 |
| Zyxel | Ax7501-B0 Firmware | < 5.17\(abpc.7.2\)c0 |
| Zyxel | Ax7501-B1 Firmware | < 5.17\(abpc.7.2\)c0 |
| Zyxel | Pe3301-00 Firmware | < 5.63\(acmt.3.1\)c0 |
| Zyxel | Pe5301-01 Firmware | < 5.63\(acoj.3.1\)c0 |
| Zyxel | Px5302-00 Firmware | < 5.44\(acnm.0.1\)c0 |
| Zyxel | Px5301-T0 Firmware | < 5.44\(ackb.0.7\)c0 |
| Zyxel | We3300-00 Firmware | < 5.70\(acka.2\)c0 |
| Zyxel | Wx3100-T0 Firmware | < 5.50\(abvl.4.10\)c0 |
| Zyxel | We4600-00 Firmware | < 6.70\(ackt.1\)c0 |
| Zyxel | Wx5600-T0 Firmware | < 5.70\(aceb.6\)c0 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-0711?
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device.
How severe is CVE-2026-0711?
CVE-2026-0711 has a CVSS score of 6.8/10 (MEDIUM severity). The EPSS model estimates a 0.85% probability of exploitation in the next 30 days.
How do I fix CVE-2026-0711?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-0704In affected version of Octopus Deploy it was possible to rem…9.1
- CVE-2026-0705Local privilege escalation due to insecure folder permission…6.7
- CVE-2026-0707A flaw was found in Keycloak. The Keycloak Authorization hea…5.3
- CVE-2026-0708A flaw was found in libucl. A remote attacker could exploit …6.5
- CVE-2026-0709Some Hikvision Wireless Access Points are vulnerable to auth…7.2
- CVE-2026-0710A flaw was found in SIPp. A remote attacker could exploit th…8.4
- CVE-2026-0712Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-0713Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-0714A physical attack vulnerability exists in certain Moxa indus…6.8
- CVE-2026-0715Moxa Arm-based industrial computers running Moxa Industrial …6.8
- CVE-2026-0716A flaw was found in libsoup’s WebSocket frame processing whe…4.8
- CVE-2026-0717The LottieFiles – Lottie block for Gutenberg plugin for Word…5.3
Are you affected by CVE-2026-0711?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST