Zyxel security advisory (AV26-780)

Serial number: AV26-780
Date: August 5, 2026

As of August 4, 2026, Zyxel is affected by vulnerabilities in the following products:

• ATP series firmware
  • from V4.32 through V5.42 Patch 1
• USG FLEX 50(W) series firmware
  • from V4.16 through V5.42 Patch 1
• USG FLEX series firmware
  • from V4.50 through V5.42 Patch 1
• USG20(W)-VPN series firmware
  • from V4.16 through V5.42 Patch 1
• WAX650S firmware
  • Prior to or equal to 7.10(ABRM.4)C0

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Zyxel security advisory for path traversal vulnerability in the configuration file execution CLI command of ZLD firewalls
• Zyxel security advisory for command injection and improper authentication vulnerabilities in certain APs, FWA7, and Security Routers | Zyxel Networks