Zyxel WAC5302D-SV2 Firmware vulnerabilities

4 CVEs affecting Zyxel WAC5302D-SV2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-6265, published 2025-07-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-26531, published 2022-05-24. High severity, CVSS 7.8. EPSS: 6.2% chance of exploitation in the next 30 days. Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP…
CVE-2022-26532, published 2022-05-24. High severity, CVSS 7.8. EPSS: 4.8% chance of exploitation in the next 30 days. A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series…
CVE-2023-22918, published 2023-04-24. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through 5.35, USG FLEX…
CVE-2025-6265, published 2025-07-15. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. A path traversal vulnerability in the file_upload-cgi CGI program of Zyxel NWA50AX PRO firmware version 7.10(ACGE.2) and earlier could allow an authenticated attacker with administrator privileges to…