Sysprobs Sysprobs

CISA KEV by vendor

Zyxel vulnerabilities in the CISA KEV catalogue

13 Zyxel entries in CISA's Known Exploited Vulnerabilities catalogue, 2 of them (15 percent) known to have been used in ransomware campaigns. First added 3 November 2021, latest 21 September 2026.

Last updated MethodologyDownload all entries (CSV)

By . Published by Sysprobs.

Dinesh has worked in IT for about 20 years across virtualisation, networking and Microsoft platforms. He runs Sysprobs.

Data status: a source is stale

Last synced CISA catalogue version 2026.11.04 (released 4 November 2026) 1,768 entries Updated manually

13entries, 0.7% of the catalogue
2known ransomware use
0added in the last 7 days
0federal due dates in the next 14 days

Products

Zyxel products in the catalogue, by number of entries
Product, as CISA names itEntries
Multiple Firewalls5
DSL CPE Devices2
Multiple Network-Attached Storage (NAS) Devices2
GS1900 Series Switches1
EMG2926 Routers1
P660HN-T1A Routers1
Multiple Products1

Latest additions

The 10 most recent Zyxel entries
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2026-7273GS1900 Series Switches2026-09-212026-09-24Unknown8.8 High2.7%Not auto, total3 days + triage
CVE-2024-40891DSL CPE Devices2025-02-112025-03-04Unknown8.8 High22.8%Not auto, total3 days + triage
CVE-2024-40890DSL CPE Devices2025-02-112025-03-04Unknown8.8 High20.7%Not auto, total3 days + triage
CVE-2024-11667Multiple Firewalls2024-12-032024-12-24Known9.8 Critical2.9%Auto, partial3 days
CVE-2017-6884EMG2926 Routers2023-09-182023-10-09Known8.8 High32.9%Not auto, total3 days + triage
CVE-2017-18368P660HN-T1A Routers2023-08-072023-08-28Unknown9.8 Critical94.5%Auto, total3 days + triage
CVE-2023-27992Multiple Network-Attached Storage (NAS) Devices2023-06-232023-07-14Unknown9.8 Critical82.2%Auto, total3 days + triage
CVE-2023-33010Multiple Firewalls2023-06-052023-06-26Unknown9.8 Critical29.0%Auto, total3 days + triage
CVE-2023-33009Multiple Firewalls2023-06-052023-06-26Unknown9.8 Critical28.1%Auto, total3 days + triage
CVE-2023-28771Multiple Firewalls2023-05-312023-06-21Unknown9.8 Critical99.2%Auto, total3 days + triage

All 13 entries

Every Zyxel entry, newest first
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2026-7273GS1900 Series Switches2026-09-212026-09-24Unknown8.8 High2.7%Not auto, total3 days + triage
CVE-2024-40891DSL CPE Devices2025-02-112025-03-04Unknown8.8 High22.8%Not auto, total3 days + triage
CVE-2024-40890DSL CPE Devices2025-02-112025-03-04Unknown8.8 High20.7%Not auto, total3 days + triage
CVE-2024-11667Multiple Firewalls2024-12-032024-12-24Known9.8 Critical2.9%Auto, partial3 days
CVE-2017-6884EMG2926 Routers2023-09-182023-10-09Known8.8 High32.9%Not auto, total3 days + triage
CVE-2017-18368P660HN-T1A Routers2023-08-072023-08-28Unknown9.8 Critical94.5%Auto, total3 days + triage
CVE-2023-27992Multiple Network-Attached Storage (NAS) Devices2023-06-232023-07-14Unknown9.8 Critical82.2%Auto, total3 days + triage
CVE-2023-33010Multiple Firewalls2023-06-052023-06-26Unknown9.8 Critical29.0%Auto, total3 days + triage
CVE-2023-33009Multiple Firewalls2023-06-052023-06-26Unknown9.8 Critical28.1%Auto, total3 days + triage
CVE-2023-28771Multiple Firewalls2023-05-312023-06-21Unknown9.8 Critical99.2%Auto, total3 days + triage
CVE-2022-30525Multiple Firewalls2022-05-162022-06-06Unknown9.8 Critical99.9%Auto, total3 days + triage
CVE-2020-9054Multiple Network-Attached Storage (NAS) Devices2022-03-252022-04-15Unknown9.8 Critical99.9%Not auto, total3 days + triage
CVE-2020-29583Multiple Products2021-11-032022-05-03Unknown9.8 Critical90.1%Auto, total3 days + triage

Due dates bind US federal civilian executive branch agencies only (BOD 26-04). Filter Zyxel in the tracker by date, score or status.

Source: CISA Known Exploited Vulnerabilities Catalog; NVD, FIRST EPSS and CISA SSVC for the scores. This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA does not endorse Sysprobs.