Firmware

XSpeeder SXZOS Pre-Auth eval() Remote Code Execution (CVE-2025-54322) new EPSS 15%CVE-2025-54322networkCRITICAL 10Unpatched2026-07-06Zyxel VMG3625-T50B Authenticated Command Injection to Root SSH Access (CVE-2026-1459) newCVE-2026-1459networkHIGHUnverified2026-07-05ZTE ZXHN H298A / H108N Router Unauthenticated Credential Disclosure (CVE-2026-34474) new EPSS 25%CVE-2026-34474networkHIGHUnverified2026-07-05ZTE ZXHN H188A Unauthenticated Wizard Handler Credential Disclosure / Auth Bypass (CVE-2026-34472) newCVE-2026-34472networkCRITICALUnverified2026-07-05ZTE Router Unauthenticated Oversized-POST Denial of Service (CVE-2026-34473) newCVE-2026-34473networkHIGHUnverified2026-07-05MIPS-Based Managed Switch Firmware Pre-Auth Kernel RCE — CVE-2026-1668 newCVE-2026-1668binaryCRITICALUnverified2026-07-05Marlin Firmware M421 G-code Handler Out-of-Bounds Write — CVE-2026-56111 newCVE-2026-56111hardwareHIGH 8.3Patched2026-07-05