Live › vulnerability › CVE-2026-76955
The zdp_wtp binary in Zyxel NWA110AX firmware through 7.12(ABTG.0)C0 has a buffer overflow. A LAN-based attacker can use it to escalate privileges on the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 02:47 UTC. All times on this page are UTC.
Zyxel says the zdp_wtp binary in many Zyxel access points (including NWA110AX up to 7.12(ABTG.0)C0), FWA7 devices and USG LITE 60AX has a buffer overflow that lets a LAN-based attacker escalate privileges. Look at any site running these models where untrusted devices or users share the local network. Zyxel says on-market products not listed in its table are not affected. The advisory does not say whether authentication is needed.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| NWA110AX | vendor | <= 7.12(ABTG.0)C0 | 7.12(ABTG.1)C0 |
Update NWA110AX firmware to 7.12(ABTG.1)C0 (Zyxel advisory, 2026-11-03).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could allow a LAN-based attacker to escalate privileges on an affected device.
This page as .md · .json · in your agent: get_signal("CVE-2026-76955")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.