tag
Firmware
Critical
XSpeeder SXZOS Pre-Auth eval() Remote Code Execution (CVE-2025-54322)
CVE-2025-54322·
XSpeeder SXZOS firmware (SD-WAN devices, routers, edge networking equipment)
unpatched
High
Zyxel VMG3625-T50B Authenticated Command Injection to Root SSH Access (CVE-2026-1459)
CVE-2026-1459·
Zyxel VMG3625-T50B (and similar) router firmware
unpatched
High
ZTE ZXHN H298A / H108N Router Unauthenticated Credential Disclosure (CVE-2026-34474)
CVE-2026-34474·
ZTE ZXHN H298A (hardware 1.1) and ZXHN H108N (hardware 2.6) home routers
unpatched
Critical
ZTE ZXHN H188A Unauthenticated Wizard Handler Credential Disclosure / Auth Bypass (CVE-2026-34472)
CVE-2026-34472·
ZTE ZXHN H188A V6 home router firmware
unpatched
High
ZTE Router Unauthenticated Oversized-POST Denial of Service (CVE-2026-34473)
CVE-2026-34473·
ZTE H-series routers (17+ models, reported as affecting 140K+ devices)
unpatched
Critical
MIPS-Based Managed Switch Firmware Pre-Auth Kernel RCE — CVE-2026-1668
CVE-2026-1668·
MIPS-based managed switch firmware (web management HTTP server), e.g. SG2005P/SG2008/SG2016P/SG2210MP/SG2218/SG2428/SG3210/SL2428/TL-SG2428 series firmware built around 2025-10-31
unpatched
High
Marlin Firmware M421 G-code Handler Out-of-Bounds Write — CVE-2026-56111
CVE-2026-56111·
Marlin Firmware (3D printer firmware), builds compiled with MESH_BED_LEVELING
patched