https://exploit-radar.com/en/flux/marques/zyxel.xml Exploit Radar: exploited Zyxel vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for Zyxel products. 2026-09-21T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-7273/ CVE-2026-7273 — Zyxel Switches (GS, XGS) 2026-09-21T00:00:00Z Apply the patches or mitigations from Zyxel; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 21, 2026. https://exploit-radar.com/en/cve/CVE-2024-40890/ CVE-2024-40890 — Zyxel Home gateways and routers (DSL, CPE) 2025-02-11T00:00:00Z Apply the patches or mitigations from Zyxel; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 11, 2025. https://exploit-radar.com/en/cve/CVE-2024-40891/ CVE-2024-40891 — Zyxel Home gateways and routers (DSL, CPE) 2025-02-11T00:00:00Z Apply the patches or mitigations from Zyxel; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 11, 2025. https://exploit-radar.com/en/cve/CVE-2024-11667/ CVE-2024-11667 — Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG) 2024-12-03T00:00:00Z Apply the patches or mitigations from Zyxel; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on December 3, 2024. https://exploit-radar.com/en/cve/CVE-2017-6884/ CVE-2017-6884 — Zyxel Home gateways and routers (DSL, CPE) 2023-09-18T00:00:00Z Apply the patches or mitigations from Zyxel; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on September 18, 2023. https://exploit-radar.com/en/cve/CVE-2017-18368/ CVE-2017-18368 — Zyxel Home gateways and routers (DSL, CPE) 2023-08-07T00:00:00Z Apply the patches or mitigations from Zyxel; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 7, 2023. https://exploit-radar.com/en/cve/CVE-2023-27992/ CVE-2023-27992 — Zyxel NAS 2023-06-23T00:00:00Z Apply the security update from Zyxel. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 23, 2023. https://exploit-radar.com/en/cve/CVE-2023-33009/ CVE-2023-33009 — Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG) 2023-06-05T00:00:00Z Apply the security update from Zyxel. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 5, 2023. https://exploit-radar.com/en/cve/CVE-2023-33010/ CVE-2023-33010 — Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG) 2023-06-05T00:00:00Z Apply the security update from Zyxel. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 5, 2023. https://exploit-radar.com/en/cve/CVE-2023-28771/ CVE-2023-28771 — Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG) 2023-05-31T00:00:00Z Apply the security update from Zyxel. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 31, 2023. https://exploit-radar.com/en/cve/CVE-2022-30525/ CVE-2022-30525 — Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG) 2022-05-16T00:00:00Z Apply the security update from Zyxel. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 16, 2022. https://exploit-radar.com/en/cve/CVE-2020-9054/ CVE-2020-9054 — Zyxel NAS 2022-03-25T00:00:00Z Apply the security update from Zyxel. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2022. https://exploit-radar.com/en/cve/CVE-2020-29583/ CVE-2020-29583 — Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG) 2021-11-03T00:00:00Z Apply the security update from Zyxel. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.