What is the CVSS score of CVE-2026-7257?

CVE-2026-7257 has a CVSS 3.1 base score of 4.4 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Zyxel WRE6505 v2 CVE-2026-7257

EUVD-2026-29377 MEDIUM

Insecure Storage of Sensitive Information (CWE-922)

2026-05-12 Zyxel

GHSA-ppfx-mp77-6vfg

Zyxel Information Disclosure

4.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.4 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

May 12, 2026 - 04:30 vuln.today

CVE Published

May 12, 2026 - 03:31 nvd

MEDIUM 4.4

DescriptionCVE.org

UNSUPPORTED WHEN ASSIGNED An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow a local attacker with administrator privileges to download and decrypt a backup configuration file.

AnalysisAI

Zyxel WRE6505 v2 firmware stores sensitive configuration data in an insecure manner, allowing local administrators to download and decrypt backup configuration files, leading to disclosure of confidential credentials and network settings. The vulnerability affects firmware version V1.00(ABDV.3)C0 and requires local access with administrative privileges. No public exploit code or active exploitation has been identified; however, the product is no longer supported by Zyxel, limiting patch availability.

Technical ContextAI

This is a CWE-922 insecure storage of sensitive information vulnerability affecting the Zyxel WRE6505 v2 wireless range extender firmware. The vulnerability resides in how the device's configuration backup files are encrypted and stored, allowing an administrator with local access to the device to retrieve and decrypt these backups. WRE6505 v2 is a compact WiFi range extender typically deployed in small office or residential settings. The CPE identifier cpe:2.3:a:zyxel:wre6505_v2_firmware indicates the vulnerability affects the firmware component across all versions of the WRE6505 v2 product line. The insecure encryption mechanism for configuration backups is a common weakness in firmware implementations where encryption keys are hardcoded, predictable, or stored alongside encrypted data.

RemediationAI

No vendor-released patch is available; Zyxel has classified this product as end-of-life and is not releasing further firmware updates. Organizations should prioritize decommissioning and replacing affected WRE6505 v2 devices with supported alternatives. Interim compensating controls include: (1) restrict administrator account access to the device via firewall rules or network segmentation, limiting who can physically or remotely access the web interface; (2) disable remote administration features in the device settings if available, reducing attack surface; (3) regularly audit administrator accounts and rotate credentials to detect unauthorized access; (4) ensure configuration backups are stored in encrypted channels only (use HTTPS/TLS) and protect backup files with additional application-layer encryption if exported; (5) monitor system logs for suspicious backup downloads or configuration exports. These controls mitigate but do not eliminate the risk. Replacement with a vendor-supported WiFi extender model is the recommended long-term remediation.