# Zyxel security incidents · pwn.watch

> Security incidents tagged Zyxel (vendor, product, platform or attack type).

Page: https://pwn.watch/t/zyxel · generated 2026-10-23T01:02:50.524Z

## Status (as of 2026-10-23)
- Incidents: 5 (0 live, 0 live and not fully patched, 4 patched)
- Days without a Zyxel security incident: 619
- Newest incident started: 2025-02-11

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/zyxel.json
- RSS (one item per incident, bumped on each update): https://pwn.watch/t/zyxel/feed.xml
- This file: https://pwn.watch/t/zyxel/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [Zyxel DSL CPE Devices: 2 exploited vulnerabilities (CVE-2024-40890, CVE-2024-40891)](https://pwn.watch/i/zyxel-dsl-cpe-devices-cve-2024-40890) ([json](https://pwn.watch/i/zyxel-dsl-cpe-devices-cve-2024-40890.json)): high, closed, unpatched, started 2025-02-11, CVE-2024-40890, CVE-2024-40891
- [Zyxel Multiple Firewalls Path Traversal](https://pwn.watch/i/zyxel-multiple-firewalls-cve-2024-11667) ([json](https://pwn.watch/i/zyxel-multiple-firewalls-cve-2024-11667.json)): high, closed, patched, started 2024-11-27, CVE-2024-11667
- [Zyxel Multiple Network-Attached Storage (NAS) Devices: Command Injection (CVE-2023-27992)](https://pwn.watch/i/zyxel-multiple-network-attached-storage-nas-cve-2023-27992) ([json](https://pwn.watch/i/zyxel-multiple-network-attached-storage-nas-cve-2023-27992.json)): critical, closed, patched, started 2023-06-23, CVE-2023-27992
- [Zyxel Multiple Firewalls: 2 exploited vulnerabilities (CVE-2023-33009, CVE-2023-33010)](https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-33009-33010) ([json](https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-33009-33010.json)): critical, closed, patched, started 2023-06-05, CVE-2023-33009, CVE-2023-33010
- [Zyxel Multiple Firewalls: OS Command Injection (CVE-2023-28771)](https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-28771) ([json](https://pwn.watch/i/zyxel-multiple-firewalls-cve-2023-28771.json)): critical, closed, patched, started 2023-05-31, CVE-2023-28771