Zyxel PX5302-00 Firmware vulnerabilities

2 CVEs affecting Zyxel PX5302-00 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-1460, published 2026-04-28.

More from Zyxel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-1460, published 2026-04-28. High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days. A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50(ABVY.7.1)C0 could…
• CVE-2026-0711, published 2026-04-28. Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days. A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with…