Known vulnerabilities in NWA90AX

Known vulnerabilities in NWA90AX

Vendor: ZyXEL Communications Corp.

Software: NWA90AX

Software CPE: cpe:2.3:h:zyxel_communications_corp:nwa90ax:*:*:*:*:*:*:*:*

Website: https://www.zyxel.com/

Total vulnerabilities: 11

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (11)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU140858 - Improper Authentication CVE-2026-8508	CWE-287	Medium	No	No	7.12(ACCV.0)C0	04.08.2026	SB2026080427
#VU140856 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-6837	CWE-78	Low	No	No	7.12(ACCV.0)C0	04.08.2026	SB2026080427
#VU112893 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-6265	CWE-22	Low	No	No	7.10(ACCV.3)	15.07.2025	SB2025071523
#VU96715 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-7261	CWE-78	High	No	No	7.00(ACCV.2)	03.09.2024	SB2024090324
#VU94650 - Improper Privilege Management CVE-2024-1575	CWE-269	Medium	No	No	7.00(ACCV.1)	23.07.2024	SB2024072302
#VU86621 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-6398	CWE-78	Low	No	No	6.29(ACCV.4)	20.02.2024	SB2024022031
#VU83523 - Improper Privilege Management CVE-2023-5797	CWE-269	Low	No	No	-	28.11.2023	SB2023112820
#VU83518 - Improper Privilege Management CVE-2023-37925	CWE-269	Low	No	No	-	28.11.2023	SB2023112820
#VU75467 - Exposure of sensitive information to an unauthorized actor CVE-2023-22918	CWE-200	Medium	No	No	6.29(ACCV.2)	25.04.2023	SB2023042508
#VU63562 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-26532	CWE-78	Low	No	No	6.27(ACCV.3)	24.05.2022	SB2022052406
#VU63561 - Improper input validation CVE-2022-26531	CWE-20	Low	Available	No	6.27(ACCV.3)	24.05.2022	SB2022052406