Zyxel Nwa90ax Pro Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Zyxel Nwa90ax Pro Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-7261 — CVSS 9.8 (critical): The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version…
• CVE-2024-12398 — CVSS 8.8 (high): An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3)…
• CVE-2025-6265 — CVSS 7.2 (high): A path traversal vulnerability in the file_upload-cgi CGI program of Zyxel NWA50AX PRO firmware version 7.10(ACGE.2) and earlier could…