Zyxel 0day Affects its Firewall Products, Too
Summary: Zyxel released security updates for a critical flaw in its NAS devices that is being actively exploited by ransomware specialists, then acknowledged the same flaw affects its UTM, ATP, and VPN firewalls running firmware ZLD V4.35 Patch 0 through Patch 2. Exploit code for the flaw was spotted for sale in the cybercrime underground for $20,000, and CERT rates the vulnerability a 10, its most severe.
What you should know: Zyxel's advisory covers only products within their warranty support period, and its NAS updates went only to models newer than 2016 - so organizations running older Zyxel firewalls may get neither a hotfix nor a patch for a flaw already being folded into Emotet.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026