Back to the CVE list
CVE-2026-1460

OS command injection in Zyxel Dx3301 T0

CVSS score

7.2

EPSS probability

%1.2

Risk score

0.1

Published

5 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2026-1460 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2026-1460 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1zyxelnebula fwa70 firmware View
2zyxelnebula fwa70 View
3zyxelnebula fwa505 firmware View
4zyxelnebula fwa505 View
5zyxelnebula fwa510 firmware View
6zyxelnebula fwa510 View
7zyxelnebula fwa515 firmware View
8zyxelnebula fwa515 View
9zyxelnebula fwa710 firmware View
10zyxelnebula fwa710 View
11zyxelnebula lte3301-plus firmware View
12zyxelnebula lte3301-plus View
13zyxelnebula lte7461-m602 firmware View
14zyxelnebula lte7461-m602 View
15zyxelnebula nr5101 firmware View
16zyxelnebula nr5101 View
17zyxelnebula nr7101 firmware View
18zyxelnebula nr7101 View
19zyxeldx3300-t0 firmware View
20zyxeldx3300-t0 View
21zyxeldx3300-t1 firmware View
22zyxeldx3300-t1 View
23zyxeldx3301-t0 firmware View
24zyxeldx3301-t0 View
25zyxeldx5401-b1 firmware View
26zyxeldx5401-b1 View
27zyxelee3301-00 firmware View
28zyxelee3301-00 View
29zyxelee5301-00 firmware View
30zyxelee5301-00 View
31zyxelee6510-10 firmware View
32zyxelee6510-10 View
33zyxelemg3525-t50b firmware View
34zyxelemg3525-t50b View
35zyxelemg5523-t50b firmware View
36zyxelemg5523-t50b View
37zyxelex2210-t0 firmware View
38zyxelex2210-t0 View
39zyxelex3300-t0 firmware View
40zyxelex3300-t0 View
41zyxelex3300-t1 firmware View
42zyxelex3300-t1 View
43zyxelex3301-t0 firmware View
44zyxelex3301-t0 View
45zyxelex3500-t0 firmware View
46zyxelex3500-t0 View
47zyxelex3501-t0 firmware View
48zyxelex3501-t0 View
49zyxelex3600-t0 firmware View
50zyxelex3600-t0 View
51zyxelex5401-b1 firmware View
52zyxelex5401-b1 View
53zyxelex5512-t0 firmware View
54zyxelex5512-t0 View
55zyxelex5601-t0 firmware View
56zyxelex5601-t0 View
57zyxelex5601-t1 firmware View
58zyxelex5601-t1 View
59zyxelex7501-b0 firmware View
60zyxelex7501-b0 View
61zyxelex7710-b0 firmware View
62zyxelex7710-b0 View
63zyxelgm4100-b0 firmware View
64zyxelgm4100-b0 View
65zyxelvmg3625-t50b firmware View
66zyxelvmg3625-t50b View
67zyxelvmg4005-b50a firmware View
68zyxelvmg4005-b50a View
69zyxelvmg4005-b60a firmware View
70zyxelvmg4005-b60a View
71zyxelvmg8623-t50b firmware View
72zyxelvmg8623-t50b View
73zyxelam7510-00 firmware View
74zyxelam7510-00 View
75zyxelax7501-b1 firmware View
76zyxelax7501-b1 View
77zyxelpe3301-00 firmware View
78zyxelpe3301-00 View
79zyxelpe5301-01 firmware View
80zyxelpe5301-01 View
81zyxelpx5301-t0 firmware View
82zyxelpx5301-t0 View
83zyxelpx5302-00 firmware View
84zyxelpx5302-00 View
85zyxelwe3300-00 firmware View
86zyxelwe3300-00 View
87zyxelwe4600-00 firmware View
88zyxelwe4600-00 View
89zyxelwx5600-t0 firmware View
90zyxelwx5600-t0 View
Total affected vendors: 1|Products: 90

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
7.2CVSS V31HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-1460 is associated with the following CWEs:

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-1460 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden
PermissionsHigh
UserGerekmiyor

Official Sources and Advisories

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-and-wireless-extenders-04-28-2026vendor-advisory

CVSS Vector Radar Chart

7.2 / 10
Attack VectorNetworkComplexityLowPrivilegesHighUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredHigh privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

Z
zyxel logo
zyxel

Weakness Type (CWE & CAPEC)

CWE-78

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-1460"