CVE-2026-12489
Received Received - Intake

Incorrect Authorization in Zyxel EX3501-T0 Firmware

Publication date: 2026-10-20

Last updated on: 2026-10-20

Assigner: Zyxel Corporation

Description
An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0 could allow an authenticated attacker to escalate privileges by modifying the login_privilege data on an affected device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-20
Last Modified
2026-10-20
Generated
2026-10-20
AI Q&A
2026-10-20
EPSS Evaluated
N/A
NVD
CVE-2026-12489
EUVD
EUVD-2026-104789

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Zyxel EX3501-T0 firmware <= 5.44(ACHR.6)C0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0. An authenticated attacker could escalate privileges by modifying the login_privilege data on an affected device.

Detection Guidance

To detect this vulnerability, check if your Zyxel EX3501-T0 firmware version is through 5.44(ACHR.6)C0. Verify the firmware version via the device's admin interface or CLI. If the version matches or is older, the device is likely vulnerable.

Impact Analysis

An attacker with access could gain higher privileges on your device, potentially allowing unauthorized actions or control. This could lead to data exposure or further compromise of connected systems.

Mitigation Strategies

Immediately install the available patches for CVE-2026-12489 from Zyxel. Check the Zyxel advisory for your specific device model and firmware version. If unsure, contact Zyxel support or your ISP for assistance.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-12489. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart