How many zyxel wac500 CVEs are in CISA KEV?

None of zyxel wac500's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for zyxel wac500 vulnerabilities?

Yes — 2 of zyxel wac500's CVEs have a known public exploit.

What are the most common weakness types in zyxel wac500 CVEs?

zyxel wac500's CVEs most often map to these CWE weakness types: CWE-269 (Improper Privilege Management), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-20 (Improper Input Validation), CWE-359 (Exposure of Private Personal Information to an Unauthorized Actor).

How many critical zyxel wac500 vulnerabilities are there?

zyxel wac500 has 1 critical and 4 high-severity CVEs.

What is the average severity of zyxel wac500 CVEs?

The average CVSS base score across zyxel wac500's scored CVEs is 7.3.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

zyxel

9 CVEs

zyxel wac500 Vulnerabilities

Name: zyxel wac500 vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for wac500 by zyxel.

9

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

7.3

Avg CVSS

2022–2025

Last updated January 14, 2025

Overview

zyxel wac500 has 9 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting zyxel wac500, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of zyxel wac500's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High4

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of zyxel wac500's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of zyxel wac500's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every zyxel wac500 version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for zyxel wac500; the CVEs below apply to the product without a version pin.

9 CVEs

Sort

High vulnerability · 2025-01-14
CVE-2024-12398
Patch
CWE-269
High · CVSS 8.8
EPSS 0.5% (41th pct)2025-01-14
Critical vulnerability · 2024-09-03
CVE-2024-7261
Patch
CWE-78
Critical · CVSS 9.8
EPSS 11.4% (96th pct)2024-09-03
Medium vulnerability · 2024-07-23
CVE-2024-1575
Patch
CWE-269
Medium · CVSS 6.5
EPSS 0.3% (25th pct)2024-07-23
High vulnerability · 2024-02-20
CVE-2023-6398
Patch
CWE-78
High · CVSS 7.2
EPSS 1.3% (68th pct)2024-02-20
Medium vulnerability · 2023-11-28
CVE-2023-5797
Patch
CWE-269
Medium · CVSS 5.5
EPSS 0.2% (12th pct)2023-11-28
Medium vulnerability · 2023-11-28
CVE-2023-37925
Patch
CWE-269
Medium · CVSS 5.5
EPSS 0.2% (12th pct)2023-11-28
Medium vulnerability · 2023-04-24
CVE-2023-22918
Patch
CWE-359
Medium · CVSS 6.5
EPSS 0.8% (52th pct)2023-04-24
High vulnerability · 2022-05-24
CVE-2022-26532
Public exploit
Patch
CWE-88
High · CVSS 7.8
EPSS 4.8% (91th pct)2022-05-24
High vulnerability · 2022-05-24
CVE-2022-26531
Public exploit
Patch
CWE-20
High · CVSS 7.8
EPSS 5.6% (92th pct)2022-05-24

Common weakness types

The CWE weakness categories most often found in zyxel wac500 CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many zyxel wac500 CVEs were published each year.

2022

2

2023

3

2024

3

2025

1

Other zyxel products

Browse vulnerabilities for other products by zyxel.

usg flex 100w54 CVEs usg flex 20054 CVEs usg flex 50054 CVEs usg flex 70054 CVEs usg flex 10050 CVEs USG FLEX series firmware50 CVEs ATP series firmware48 CVEs usg flex 50w45 CVEs

All zyxel vulnerabilities

Frequently asked questions

Common questions about zyxel wac500 vulnerabilities.

How many CVEs does zyxel wac500 have?: zyxel wac500 has 9 published CVE records since 2022.
How many zyxel wac500 CVEs are in CISA KEV?: None of zyxel wac500's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for zyxel wac500 vulnerabilities?: Yes — 2 of zyxel wac500's CVEs have a known public exploit.
What are the most common weakness types in zyxel wac500 CVEs?: zyxel wac500's CVEs most often map to these CWE weakness types: CWE-269 (Improper Privilege Management), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-20 (Improper Input Validation), CWE-359 (Exposure of Private Personal Information to an Unauthorized Actor).
How many critical zyxel wac500 vulnerabilities are there?: zyxel wac500 has 1 critical and 4 high-severity CVEs.
What is the average severity of zyxel wac500 CVEs?: The average CVSS base score across zyxel wac500's scored CVEs is 7.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track zyxel wac500 vulnerabilities

Monitor new zyxel wac500 vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing