CVE-2025-11730

Published Feb 5, 2026

Last updated 19 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-11730 describes a post-authentication command injection vulnerability found in the Dynamic DNS (DDNS) configuration CLI command of various Zyxel devices. This flaw affects Zyxel ATP series, USG FLEX series, USG FLEX 50(W) series, and USG20(W)-VPN series firmware versions from V5.35 through V5.41. An authenticated attacker possessing administrator privileges can exploit this vulnerability. By supplying a specially crafted string as an argument to the CLI command, the attacker can execute arbitrary operating system commands on the affected device.

Description: A post‑authentication command injection vulnerability in the Dynamic DNS (DDNS) configuration CLI command in Zyxel ATP series firmware versions from V5.35 through V5.41, USG FLEX series firmware versions from V5.35 through V5.41, USG FLEX 50(W) series firmware versions from V5.35 through V5.41, and USG20(W)-VPN series firmware versions from V5.35 through V5.41 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on an affected device by supplying a specially crafted string as an argument to the CLI command.
Source: security@zyxel.com.tw
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.2
Impact score: 5.9
Exploitability score: 1.2
Vector string: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

security@zyxel.com.tw: CWE-78

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 4

References