Zyxel USG20W-VPN Series Firmware vulnerabilities

2 CVEs affecting Zyxel USG20W-VPN Series Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-14818, published 2026-08-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-11730, published 2026-02-05. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. A post‑authentication command injection vulnerability in the Dynamic DNS (DDNS) configuration CLI command in Zyxel ATP series firmware versions from V5.35 through V5.41, USG FLEX series firmware…
CVE-2026-14818, published 2026-08-04. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from…