CVE-2026-7255: Zyxel WRE6505 Firmware

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

** UNSUPPORTED WHEN ASSIGNED ** An improper restriction of excessive authentication attempts vulnerability in the web management interface of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to brute-force the password and bypass authentication.

Affected products

• Zyxel WRE6505 Firmware: version v1.00(abdv.3)c0 only

Published 2026-05-12. Last modified 2026-06-17.