Zyxel
CVEs currently on EVULNABLE's Priority Feed for Zyxel, and this vendor's own CISA KEV history.
CISA KEV additions over time
Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.
20 Apr – 12 Oct; busiest week: 1 added.
- Not ransomware-linked
- Ransomware-linked
- This week (so far)
| Week of | Added to KEV | Ransomware-linked |
|---|---|---|
| 2026-04-20 | 0 | 0 |
| 2026-04-27 | 0 | 0 |
| 2026-05-04 | 0 | 0 |
| 2026-05-11 | 0 | 0 |
| 2026-05-18 | 0 | 0 |
| 2026-05-25 | 0 | 0 |
| 2026-06-01 | 0 | 0 |
| 2026-06-08 | 0 | 0 |
| 2026-06-15 | 0 | 0 |
| 2026-06-22 | 0 | 0 |
| 2026-06-29 | 0 | 0 |
| 2026-07-06 | 0 | 0 |
| 2026-07-13 | 0 | 0 |
| 2026-07-20 | 0 | 0 |
| 2026-07-27 | 0 | 0 |
| 2026-08-03 | 0 | 0 |
| 2026-08-10 | 0 | 0 |
| 2026-08-17 | 0 | 0 |
| 2026-08-24 | 0 | 0 |
| 2026-08-31 | 0 | 0 |
| 2026-09-07 | 0 | 0 |
| 2026-09-14 | 0 | 0 |
| 2026-09-21 | 1 | 0 |
| 2026-09-28 | 0 | 0 |
| 2026-10-05 | 0 | 0 |
| 2026-10-12 (so far) | 0 | 0 |
In EVULNABLE's ranked feed
Showing all 13 Zyxel CVEs in EVULNABLE's ranked feed.
#1 87 Immediate CVE-2020-9054 ExigentKEV since 2022 · listed over a yearCISA KEV Zyxel — Zyxel Multiple NAS Devices OS Command Injection Vulnerability KEV, EPSS 99.9%
EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#2 87 Immediate CVE-2022-30525 ExigentKEV since 2022 · listed over a yearCISA KEV Zyxel — Zyxel Multiple Firewalls OS Command Injection Vulnerability KEV, EPSS 99.9%
EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#3 87 Immediate CVE-2023-28771 ExigentKEV since 2023 · listed over a yearCISA KEV Zyxel — Zyxel Multiple Firewalls OS Command Injection Vulnerability KEV, EPSS 99.3%
EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.993.
#4 86 Immediate CVE-2017-18368 ExigentKEV since 2023 · listed over a yearCISA KEV Zyxel — Zyxel P660HN-T1A Routers Command Injection Vulnerability KEV, EPSS 94.4%
EVRS 86/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.944.
#5 85 Immediate CVE-2020-29583 ExigentKEV since 2021 · listed over a yearCISA KEV Zyxel — Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability KEV, EPSS 90.2%
EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.902.
#6 85 Immediate CVE-2024-11667 ExigentKEV since 2024 · listed over a yearRansomwareCISA KEV Zyxel — Zyxel Multiple Firewalls Path Traversal Vulnerability KEV + ransomware, EPSS 2.9%
EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#7 82 Urgent CVE-2023-27992 KEV since 2023 · listed over a yearCISA KEV Zyxel — Zyxel Multiple NAS Devices Command Injection Vulnerability KEV, EPSS 82.8%
EVRS 82/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.828.
#8 75 Urgent CVE-2017-6884 KEV since 2023 · listed over a yearRansomwareCISA KEV Zyxel — Zyxel EMG2926 Routers Command Injection Vulnerability KEV + ransomware, EPSS 33.0%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#9 75 Urgent CVE-2023-33010 KEV since 2023 · listed over a yearCISA KEV Zyxel — Zyxel Multiple Firewalls Buffer Overflow Vulnerability KEV, EPSS 29.0%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.290.
#10 75 Urgent CVE-2023-33009 KEV since 2023 · listed over a yearCISA KEV Zyxel — Zyxel Multiple Firewalls Buffer Overflow Vulnerability KEV, EPSS 28.1%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.281.
#11 75 Urgent CVE-2024-40891 KEV since 2025 · listed over a yearCISA KEV Zyxel — Zyxel DSL CPE OS Command Injection Vulnerability KEV, EPSS 21.7%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.217.
#12 75 Urgent CVE-2024-40890 KEV since 2025 · listed over a yearCISA KEV Zyxel — Zyxel DSL CPE OS Command Injection Vulnerability KEV, EPSS 20.7%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.207.
#13 75 Urgent CVE-2026-7273 CISA federal deadline · Overdue by 22 daysCISA KEV Zyxel — Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability KEV, EPSS 2.5%, added to KEV within the last 30 days
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.025.