How many CVEs does Zyxel have?

Zyxel has 335 published CVE records since 2002, including 35 in the last two years.

How many Zyxel CVEs are in CISA KEV?

Yes — 12 of Zyxel's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which Zyxel products have the most CVEs?

The Zyxel products with the most published CVEs are usg flex 200, usg flex 100w, usg flex 700, usg flex 500, usg flex 100.

What are the most common weakness types in Zyxel CVEs?

Zyxel's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-269 (Improper Privilege Management), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

Are there public exploits for Zyxel vulnerabilities?

Yes — 95 of Zyxel's CVEs have a known public exploit.

How many critical Zyxel vulnerabilities are there?

Zyxel has 64 critical and 132 high-severity CVEs.

What is the average severity of Zyxel CVEs?

The average CVSS base score across Zyxel's scored CVEs is 7.3.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

335 CVEs

12 in CISA KEV

Zyxel Vulnerabilities

Name: Zyxel vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Zyxel.

335

Total CVEs

Published

12

In CISA KEV

Exploited in the wild

95

Public exploits

PoC or exploit code

7.3

Avg CVSS

2002–2026

Overview

Zyxel has 335 published CVE records since 2002, of which 12 are in CISA's Known Exploited Vulnerabilities catalog and 95 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Zyxel products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Zyxel's vulnerability posture, as a share of its 335 published CVEs.

Average CVSS: 7.3
Critical / high: 59%
Actively exploited (KEV): 4%
Public exploit available: 28%
Patch available: 37%

Severity and exploitation

How the CVSS severity of Zyxel's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical64

High132

Medium139

Low0

In CISA’s Known Exploited Vulnerabilities catalog

12

12 of Zyxel's CVEs are confirmed exploited in the wild.

Public exploits

95

95 of Zyxel's CVEs have a known public exploit available.

Most affected products

The Zyxel products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Zyxel CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Zyxel CVE records.

Disclosure activity by year

How many Zyxel CVEs were published each year.

2019

24

2020

49

2021

11

2022

22

2023

60

2024

37

2025

16

2026

19

Latest Zyxel CVEs

The most recently disclosed vulnerabilities affecting Zyxel.

High vulnerability · 2026-06-16
CWE-121
High · CVSS 8.8
EPSS 0.3%2026-06-16
Medium vulnerability · 2026-06-02
CWE-120
Medium · CVSS 6.5
EPSS 0.2%2026-06-02
Medium vulnerability · 2026-06-02
CWE-120
Medium · CVSS 6.5
EPSS 0.2%2026-06-02
Medium vulnerability · 2026-05-26
CWE-862
Medium · CVSS 6.5
EPSS 0.2%2026-05-26
High vulnerability · 2026-05-12
CWE-120
High · CVSS 7.5
EPSS 0.3%2026-05-12
Medium vulnerability · 2026-05-12
CWE-922
Medium · CVSS 4.4
EPSS 0.1%2026-05-12
High vulnerability · 2026-05-12
CWE-78
High · CVSS 8.8
EPSS 1.0%2026-05-12
Medium vulnerability · 2026-05-12
CWE-307
Medium · CVSS 6.5
EPSS 0.2%2026-05-12
High vulnerability · 2026-04-28
CWE-78
High · CVSS 7.2
EPSS 1.2%2026-04-28
Medium vulnerability · 2026-04-28
CWE-78
Medium · CVSS 6.8
EPSS 0.8%2026-04-28
Medium vulnerability · 2026-04-21
CWE-116
Medium · CVSS 5.7
EPSS 0.2%2026-04-21
High vulnerability · 2026-02-24
CWE-78
High · CVSS 7.2
EPSS 0.9%2026-02-24

Track new Zyxel CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Zyxel CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

Synology352 CVEs Asus347 CVEs Liferay341 CVEs Python334 CVEs Cybozu, Inc.331 CVEs Opera326 CVEs SolarWinds324 CVEs Moxa320 CVEs

Browse all vendors

Frequently asked questions

Common questions about Zyxel vulnerabilities.

How many CVEs does Zyxel have?: Zyxel has 335 published CVE records since 2002, including 35 in the last two years.
How many Zyxel CVEs are in CISA KEV?: Yes — 12 of Zyxel's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Which Zyxel products have the most CVEs?: The Zyxel products with the most published CVEs are usg flex 200, usg flex 100w, usg flex 700, usg flex 500, usg flex 100.
What are the most common weakness types in Zyxel CVEs?: Zyxel's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-269 (Improper Privilege Management), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
Are there public exploits for Zyxel vulnerabilities?: Yes — 95 of Zyxel's CVEs have a known public exploit.
How many critical Zyxel vulnerabilities are there?: Zyxel has 64 critical and 132 high-severity CVEs.
What is the average severity of Zyxel CVEs?: The average CVSS base score across Zyxel's scored CVEs is 7.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Zyxel vulnerabilities

Monitor new Zyxel vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing