VULNERABILITY INTELLIGENCE

CVE-2026-0711

CVSS score6.8 MEDIUM

EPSS probability0.85%

CISA KEVNot currently listed

Published2026-04-28

Last modified2026-07-25

Description

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device.