CVE-2025-13942NVD

Vulnerability Summary

A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating system (OS) commands on an affected device by sending specially crafted UPnP SOAP requests.

Severity Level

CRITICAL(9.8)

Published Date

Feb 24, 2026

Last Modified

Feb 25, 2026

Exploitation Status

No confirmed exploitation yet

EPSS Score (30-Day)

0.18%Probability

Root Weakness (CWE)

CWE-78: OS Command Injection ↗

The software constructs all or part of an OS command using externally-influenced input, but does not properly neutralize special elements.

CVSS v3.1 Base Metrics — Score 9.8 (CRITICAL)

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

Affected & Patched Versions

Affected Versions

Zyxel Wx5610-b0 Firmware < 5.18\(acgj.0.5\)c0
Zyxel Lte3301-plus Firmware < 1.00\(abqu.9\)c0
Zyxel Nebula Lte3301-plus Firmware < 1.18\(acca.6\)v0
Zyxel Nr7101 Firmware < 1.00\(abuv.12\)b2
Zyxel Nebula Nr7101 Firmware < 1.16\(accc.1\)v0
Zyxel Dx4510-b0 Firmware < 5.17\(abyl.10.1\)c0
Zyxel Dx4510-b1 Firmware < 5.17\(abyl.10.1\)c0
Zyxel Ee6510-10 Firmware < 5.19\(acjq.4.1\)c0
Zyxel Emg6726-b10a Firmware < 5.13\(abnp.8.2\)c1
Zyxel Ex2210-t0 Firmware < 5.50\(acdi.2.4\)c0
Zyxel Ex3510-b0 Firmware < 5.17\(abup.15.2\)c0
Zyxel Ex3510-b1 Firmware < 5.17\(abup.15.2\)c0
Zyxel Ex5510-b0 Firmware < 5.17\(abqx.11.1\)c0
Zyxel Ex5512-t0 Firmware < 5.70\(aceg.5.4\)c0
Zyxel Ex7710-b0 Firmware < 5.18\(acak.1.6\)c0
Zyxel Vmg4927-b50a Firmware < 5.13\(ably.10.2\)c0
Zyxel Px3321-t1 Firmware < 5.44\(acjb.1.5\)c0
Zyxel Px3321-t1 Firmware < 5.44\(achk.3\)c0
Zyxel Px5301-t0 Firmware < 5.44\(ackb.0.6\)c0

Patched Versions

Zyxel Wx5610-b0 Firmware 5.18\(acgj.0.5\)c0
Zyxel Lte3301-plus Firmware 1.00\(abqu.9\)c0
Zyxel Nebula Lte3301-plus Firmware 1.18\(acca.6\)v0
Zyxel Nr7101 Firmware 1.00\(abuv.12\)b2
Zyxel Nebula Nr7101 Firmware 1.16\(accc.1\)v0
Zyxel Dx4510-b0 Firmware 5.17\(abyl.10.1\)c0
Zyxel Dx4510-b1 Firmware 5.17\(abyl.10.1\)c0
Zyxel Ee6510-10 Firmware 5.19\(acjq.4.1\)c0
Zyxel Emg6726-b10a Firmware 5.13\(abnp.8.2\)c1
Zyxel Ex2210-t0 Firmware 5.50\(acdi.2.4\)c0
Zyxel Ex3510-b0 Firmware 5.17\(abup.15.2\)c0
Zyxel Ex3510-b1 Firmware 5.17\(abup.15.2\)c0
Zyxel Ex5510-b0 Firmware 5.17\(abqx.11.1\)c0
Zyxel Ex5512-t0 Firmware 5.70\(aceg.5.4\)c0
Zyxel Ex7710-b0 Firmware 5.18\(acak.1.6\)c0
Zyxel Vmg4927-b50a Firmware 5.13\(ably.10.2\)c0
Zyxel Px3321-t1 Firmware 5.44\(acjb.1.5\)c0
Zyxel Px3321-t1 Firmware 5.44\(achk.3\)c0
Zyxel Px5301-t0 Firmware 5.44\(ackb.0.6\)c0

🎁7-Day Free Trial — Try Pro or Team, no card required.

📧Email Delivery — Threat intel straight to your inbox.

♾️Unlimited Vendors — Track your entire stack.

🚨All New CVEs — Be the first to know.

📈EPSS Spike Alerts — Catch rising risk before it peaks.

🎯Custom EPSS/CVSS — Filter noise, focus on risk.

🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.

🐙GitHub Issues — Auto-tracked, no duplicates.

📬Weekly Digest — One clean summary, not inbox spam.

🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).

💬Webhooks — Slack & Teams integration.

🔀Smart Routing — Critical alerts to one channel, rest to another.

🚫Ad-Free — Uninterrupted experience.