Live › vulnerability › CVE-2026-12489
Go to dashboardAn incorrect authorization flaw in the Data Access Layer of Zyxel EX3501-T0 firmware up to 5.44(ACHR.6)C0 lets a logged-in user change the login_privilege data. That lets the attacker raise their own privileges on the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Owners of Zyxel EX3501-T0 devices running firmware through . The attacker must already hold a valid login on the device. Devices with no user accounts beyond the administrator have a smaller exposure, but the sources do not say more.
5.44(ACHR.6)C0No product ranges from the sources yet.
5.44(ACHR.6)C0 and earlier builds listed as affected5.44(ACHR.6)C0 (the fixed version is unknown from the sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0 could allow an authenticated attacker to escalate privileges by modifying the login_privilege data on an affected device.
This page as .md · .json · in your agent: get_signal("CVE-2026-12489")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.