Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-B1 firmware versions through 5.17(ABPC.7.2)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-21 | 1 | Disclosure1 |
| 2026-07-28 | 1 | Disclosure1 |
| 2026-08-06 | 1 | Patch1 |
⚠️ Vulnerabilidad en productos Zyxel ❗ CVE-2026-6952 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-zyxel-3/ https://t.co/A0Z6GPWTYi
Post summary
The tweet announces a new vulnerability (CVE-2026-6952) affecting Zyxel products and directs readers to external links for further information. No additional details about exploitation, patching, or technical specifics are included.
🛠️ Zyxel tuvo que parchar una falla que permite ejecutar comandos del sistema operativo con solo tener acceso de administrador comprometido en el campo LogServer del syslog. CVE-2026-6952 afecta CPE DSL y Ethernet, ONT de fibra y extensores inalámbricos, aunque el acceso WAN viene deshabilitado por defecto de fábrica. El riesgo real aparece cuando las contraseñas configuradas por el usuario ya fueron comprometidas en otro incidente previo. Quieres conocer más novedades tecnológicas? Sigue a @smarteck_cl y guarda, para tus futuras referencias. #Zyxel #CVE #Ciberseguridad https://support.zyxel.eu/hc/en-us/articles/11903702998034-Zyxel-security-advisory-for-pre-authentication-command-injection-vulnerability-in-NAS-products
Post summary
Zyxel disclosed a CVE‑2026‑6952 command‐injection vulnerability, issued a patch, and provided an advisory, but no PoC or active exploitation was reported.
CVE-2026-6952 Post-Authentication Command Injection in Zyxel AX7501-B1 Firmware Through 5.17 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6952
Post summary
This entry announces CVE-2026-6952, a post-authentication command injection flaw in Zyxel AX7501-B1 firmware v5.17, providing basic technical details but no exploit, patch, or indication of active exploitation.