What is the CVSS score of CVE-2026-1459?

CVE-2026-1459 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Dx5401 B1 Firmware are affected by CVE-2026-1459?

A vulnerability in Zyxel VMG3625-T50B devices allows authenticated administrators to execute unauthorized commands, potentially compromising network infrastructure and sensitive data.

How to fix or mitigate CVE-2026-1459?

Within 24 hours: Inventory all VMG3625-T50B devices in production and restrict administrator access to trusted personnel only. Within 7 days: Implement network segmentation to isolate affected devices and disable the TR-369 certificate download feature if not operationally required. Within 30 days: Monitor vendor advisories for patch availability and develop a testing plan for immediate deployment once released.

Dx5401 B1 Firmware CVE-2026-1459

HIGH

OS Command Injection (CWE-78)

2026-02-24 security@zyxel.com.tw

Zyxel Command Injection Dx5401 B1 Firmware Emg5523 T50b Firmware Vmg3625 T50b Firmware Vmg3625 T50c Firmware Vmg8623 T50b Firmware Emg3525 T50b Firmware

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 24, 2026 - 03:16 nvd

HIGH 7.2

DescriptionCVE.org

A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.7)C0 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on an affected device.

AnalysisAI

Zyxel VMG3625-T50B, DX5401 B1, and EMG5523 T50B devices with firmware through version 5.50(ABPM.9.7)C0 contain a post-authentication command injection vulnerability in the TR-369 certificate download function that allows authenticated administrators to execute arbitrary operating system commands. An attacker with admin credentials could leverage this to gain complete control over the affected device. No patch is currently available.

Technical ContextAI

Classified as CWE-78 (OS Command Injection). Affects Vmg8623-T50B Firmware. A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.7)C0 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on an affected device.