VulnSocial

CVE-2026-7256Disclosure(zyxel / wre6505)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to execute operating system (OS) commands on a vulnerable device by sending a crafted HTTP request.

zyxel CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • wre6505
  • wre6505_firmware

Threat summary

  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 2d ago at 2 mentions (2026-05-12); latest day: 1
  • 4 total mentions across 3 days

Affected systems

Vendors
zyxel
Products
wre6505wre6505_firmware

2 versions affected across 2 products

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-05-12: 2Mentions · 2026-05-22: 1Mentions · 2026-06-18: 1Technical Details · 2026-05-12: 2Technical Details · 2026-06-18: 105-1205-2206-18
Signal classification2 categories
Disclosure
375.0%
General
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-05-122
Disclosure2
2026-05-221
General1
2026-06-181
Disclosure1
Full discourse4 posts
  • Joey Romaine 🇺🇸 |=★=|@Tank23x0
    Disclosure

    CVE-2026-7256: high severity (CVSS 8.8). Scope affected systems for a command injection issue. Treat it like a small fire drill before it becomes a large one.

    Post summary

    The post announces CVE‑2026‑7256, a high‑severity command injection flaw, and warns users to treat it like a small fire drill, but offers no PoC, exploit, or patch details.

    1000048
    337 followersView on X
  • CERT-PY@CERTpy
    General

    ⚠️ Vulnerabilidad en productos Zyxel ❗ CVE-2026-7256 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-zyxel/ https://t.co/UwoLPYJZbZ

    Post summary

    The tweet alerts to a CVE affecting Zyxel products but provides no further technical details, PoC, exploit, or patch information.

    00000110
    6.7K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-7256 Command Injection in Zyxel WRE6505 v2 Firmware V1.00(ABDV.3)C0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7256

    Post summary

    The post announces a command injection vulnerability (CVE-2026-7256) in Zyxel WRE6505 firmware. No Proof‑of‑Concept, exploit code, or mitigation details are provided.

    0000064
    4.0K followersView on X
  • Entity@0x2ed3bb60
    Disclosure

    🚨 Entity: CVE-2026-7256. Zyxel WRE6505 v2 firmware command injection. Adjacent LAN attacker executes OS commands via crafted HTTP. Device is EOL, unsupported. Retire or isolate immediately. https://0x2ed3bb60.xyz/threat/44cd329b2a091c9d

    Post summary

    The post announces CVE-2026-7256, a command injection flaw in Zyxel WRE6505 v2 firmware, and advises retiring unsupported devices but provides no PoC, exploit, or patch details.

    0000034
    7 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWzyxelwre6505v2--
OSzyxelwre6505_firmwarev1.00\(abdv.3\)c0--

Explore more

Back to dashboardzyxel CVEswre6505 vulnerabilities