What is the CVSS score of CVE-2026-0711?

CVE-2026-0711 has a CVSS 3.1 base score of 6.8 (Medium). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Zyxel DX3300-T0 CVE-2026-0711

EUVD-2026-25968 MEDIUM

OS Command Injection (CWE-78)

2026-04-28 Zyxel

Command Injection Zyxel Dx3300 T0 Firmware

6.8

CVSS 3.1 · Vendor: Zyxel

Severity by source

Vendor (Zyxel) PRIMARY

6.8 MEDIUM

AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (Zyxel) · only source for this CVE.

CVSS VectorVendor: Zyxel

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Apr 28, 2026 - 03:15 vuln.today

EUVD ID Assigned

Apr 28, 2026 - 03:00 euvd

EUVD-2026-25968

Analysis Generated

Apr 28, 2026 - 03:00 vuln.today

CVE Published

Apr 28, 2026 - 01:57 nvd

MEDIUM 6.8

DescriptionCVE.org

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device.

AnalysisAI

Command injection in EasyMesh APIs of Zyxel DX3300-T0 firmware through version 5.50(ABVY.7.1)C0 allows authenticated administrators with adjacent network access to execute arbitrary OS commands on the device. The vulnerability requires both administrator privileges and adjacent network positioning (AV:A), significantly limiting exposure to local network attackers rather than remote threat actors. CVSS 6.8 reflects high confidentiality, integrity, and availability impact but is constrained by elevated privilege and adjacency requirements.

Technical ContextAI

The vulnerability exists in the EasyMesh-related APIs, a mesh networking protocol component in Zyxel CPE (customer premises equipment) firmware. EasyMesh APIs handle inter-device communication in mesh topologies and may process command parameters without proper sanitization. CWE-78 (OS Command Injection) indicates the APIs fail to neutralize special characters or metacharacters in user-supplied input before passing it to OS command execution functions, likely in a web interface or local management API. The affected device is a 4G/LTE/5G NR CPE (cellular gateway), running embedded Linux-based firmware vulnerable in versions up to 5.50(ABVY.7.1)C0.

RemediationAI

Apply the vendor-released firmware patch from Zyxel security advisory (https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-and-wireless-extenders-04-28-2026) to upgrade DX3300-T0 firmware beyond version 5.50(ABVY.7.1)C0. Pending patch deployment, restrict administrative access to the device web interface and EasyMesh management APIs to trusted local network segments using network segmentation and access control lists. Disable EasyMesh functionality if not operationally required, as this is the attack surface. Monitor local network for anomalous API calls to EasyMesh endpoints. Rotate any shared or potentially compromised administrator credentials before patching, as the vulnerability requires authenticated admin access.