Product by Zyxel
Atp Series Firmware
49 known vulnerabilities in Atp Series Firmware (Zyxel), 5 of them actively exploited (CISA KEV).
Key figures
49
Vulnerabilities
5
Actively exploited (KEV)
1
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-28771 | Zyxel Multiple Firewalls OS Command Injection Vulnerability In CISA KEValso in 20 other products | 9.8 | |
| Critical | CVE-2024-11667 | Zyxel Multiple Firewalls Path Traversal Vulnerability In CISA KEVRansomwarealso in 4 other products | 7.5 | |
| Critical | CVE-2022-30525 | Zyxel Multiple Firewalls OS Command Injection Vulnerability In CISA KEValso in 20 other products | 9.8 | |
| Critical | CVE-2023-33010 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability In CISA KEValso in 28 other products | 9.8 | |
| Critical | CVE-2023-33009 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability In CISA KEValso in 28 other products | 9.8 | |
| Critical | CVE-2022-0342 | Zyxel USG/ZyWALL series firmware: Improper Authentication | 9.8 | |
| High | CVE-2025-9133 | Zyxel ATP series firmware: Missing Authorization | 8.1 | |
| High | CVE-2023-33012 | Zyxel ATP series firmware: OS Command Injection | 8.8 | |
| High | CVE-2022-26532 | Zyxel USG/ZyWALL series firmware: Argument Injection | 7.8 | |
| Critical | CVE-2021-35029 | Zyxel USG/Zywall series Firmware: Improper Authentication | 9.8 | |
| Medium | CVE-2022-0734 | Zyxel USG/ZyWALL series firmware: Cross-site Scripting | 5.8 | |
| High | CVE-2022-26531 | Zyxel USG/ZyWALL series firmware: Improper Input Validation | 6.1 | |
| High | CVE-2022-38547 | Zyxel ZyWALL/USG series firmware: OS Command Injection | 7.2 | |
| High | CVE-2025-11730 | Zyxel ATP series firmware: OS Command Injection | 7.2 | |
| High | CVE-2025-8078 | Zyxel ATP series firmware: OS Command Injection | 7.2 | |
| High | CVE-2023-27991 | Zyxel ATP series firmware: OS Command Injection | 8.8 | |
| High | CVE-2024-42057 | Zyxel ATP series firmware: OS Command Injection | 8.1 | |
| High | CVE-2024-42060 | Zyxel ATP series firmware: OS Command Injection | 7.2 | |
| High | CVE-2024-42059 | Zyxel ATP series firmware: OS Command Injection | 7.2 | |
| High | CVE-2024-7203 | Zyxel ATP series firmware: OS Command Injection | 7.2 | |
| High | CVE-2023-6398 | Zyxel ATP series firmware: OS Command Injection | 7.2 | |
| High | CVE-2022-30526 | Zyxel USG FLEX 100(W) firmware: Improper Privilege Management | 7.8 | |
| High | CVE-2026-14818 | Zyxel ATP series firmware: Path Traversal | 7.2 | |
| Medium | CVE-2022-2030 | Zyxel USG FLEX 100(W) firmware: Path Traversal | 6.5 | |
| High | CVE-2023-6764 | Zyxel ATP series firmware: Use of Externally-Controlled Format String | 8.1 |