VulnSocial

CVE-2026-1460Disclosure(zyxel / am7510-00)

LOWCVSS 7.2 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device.

zyxel CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • am7510-00
  • am7510-00_firmware
  • ax7501-b1
  • ax7501-b1_firmware

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
zyxel
Products
am7510-00am7510-00_firmwareax7501-b1ax7501-b1_firmwaredx3300-t0dx3300-t0_firmwaredx3300-t1dx3300-t1_firmwaredx3301-t0dx3301-t0_firmware

1 version affected across 90 products

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-28: 2Technical Details · 2026-04-28: 104-28
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • Watchful IP@Watchful_IP
    Disclosure

    This vuln I reported has been disclosed by #zyxel today: CVE-2026-1460 7.2 Post auth command injection for 45 platforms (4G LTE/5G NR CPE, DSL/Ethernet, CPE Fiber ONTs, Wireless Extenders) Details and affected listed here: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-and-wireless-extenders-04-28-2026 https://t.co/5qISVJHAPe

    Post summary

    A newly disclosed command injection vulnerability (CVE-2026-1460) affecting 45 Zyxel platforms is announced, with the advisory providing technical details but no exploit, patch, or active exploitation evidence.

    03000279
    410 followersView on X
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-1460 📊 Severity: 7.2 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-1460 #CVE-2026-1460 #CVE #High #CyberSecurity #InfoSec https://t.co/eDQlAuxgP0

    Post summary

    The tweet simply announces CVE-2026-1460 with a severity rating of 7.2 and a high risk level, providing no technical details, exploitation evidence, or patch information.

    0101064
    142 followersView on X
CPE platform detail90 entries

90 of 90 entries

PartVendorProductVersionTarget SWTarget HW
HWzyxelam7510-00---
OSzyxelam7510-00_firmware---
HWzyxelax7501-b1---
OSzyxelax7501-b1_firmware---
HWzyxeldx3300-t0---
OSzyxeldx3300-t0_firmware---
HWzyxeldx3300-t1---
OSzyxeldx3300-t1_firmware---
HWzyxeldx3301-t0---
OSzyxeldx3301-t0_firmware---
HWzyxeldx5401-b1---
OSzyxeldx5401-b1_firmware---
HWzyxelee3301-00---
OSzyxelee3301-00_firmware---
HWzyxelee5301-00---
OSzyxelee5301-00_firmware---
HWzyxelee6510-10---
OSzyxelee6510-10_firmware---
HWzyxelemg3525-t50b---
OSzyxelemg3525-t50b_firmware---
HWzyxelemg5523-t50b---
OSzyxelemg5523-t50b_firmware---
HWzyxelex2210-t0---
OSzyxelex2210-t0_firmware---
HWzyxelex3300-t0---
OSzyxelex3300-t0_firmware---
HWzyxelex3300-t1---
OSzyxelex3300-t1_firmware---
HWzyxelex3301-t0---
OSzyxelex3301-t0_firmware---
HWzyxelex3500-t0---
OSzyxelex3500-t0_firmware---
HWzyxelex3501-t0---
OSzyxelex3501-t0_firmware---
HWzyxelex3600-t0---
OSzyxelex3600-t0_firmware---
HWzyxelex5401-b1---
OSzyxelex5401-b1_firmware---
HWzyxelex5512-t0---
OSzyxelex5512-t0_firmware---
HWzyxelex5601-t0---
OSzyxelex5601-t0_firmware---
HWzyxelex5601-t1---
OSzyxelex5601-t1_firmware---
HWzyxelex7501-b0---
OSzyxelex7501-b0_firmware---
HWzyxelex7710-b0---
OSzyxelex7710-b0_firmware---
HWzyxelgm4100-b0---
OSzyxelgm4100-b0_firmware---
HWzyxelnebula_fwa505---
OSzyxelnebula_fwa505_firmware---
HWzyxelnebula_fwa510---
OSzyxelnebula_fwa510_firmware---
HWzyxelnebula_fwa515---
OSzyxelnebula_fwa515_firmware---
HWzyxelnebula_fwa70---
OSzyxelnebula_fwa70_firmware---
HWzyxelnebula_fwa710---
OSzyxelnebula_fwa710_firmware---
HWzyxelnebula_lte3301-plus---
OSzyxelnebula_lte3301-plus_firmware---
HWzyxelnebula_lte7461-m602---
OSzyxelnebula_lte7461-m602_firmware---
HWzyxelnebula_nr5101---
OSzyxelnebula_nr5101_firmware---
HWzyxelnebula_nr7101---
OSzyxelnebula_nr7101_firmware---
HWzyxelpe3301-00---
OSzyxelpe3301-00_firmware---
HWzyxelpe5301-01---
OSzyxelpe5301-01_firmware---
HWzyxelpx5301-t0---
OSzyxelpx5301-t0_firmware---
HWzyxelpx5302-00---
OSzyxelpx5302-00_firmware---
HWzyxelvmg3625-t50b---
OSzyxelvmg3625-t50b_firmware---
HWzyxelvmg4005-b50a---
OSzyxelvmg4005-b50a_firmware---
HWzyxelvmg4005-b60a---
OSzyxelvmg4005-b60a_firmware---
HWzyxelvmg8623-t50b---
OSzyxelvmg8623-t50b_firmware---
HWzyxelwe3300-00---
OSzyxelwe3300-00_firmware---
HWzyxelwe4600-00---
OSzyxelwe4600-00_firmware---
HWzyxelwx5600-t0---
OSzyxelwx5600-t0_firmware---

Explore more

Back to dashboardzyxel CVEsam7510-00 vulnerabilities