A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could allow a LAN-based attacker to escalate privileges on an affected device.
An unauthenticated attacker on the local network can exploit this buffer overflow to escalate privileges and gain elevated access to the affected device.
There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.
Update Zyxel NWA110AX firmware to a version newer than 7.12(ABTG.0)C0. Restrict network access to the affected device to trusted LAN segments only. Monitor for suspicious activity targeting the zdp_wtp binary process.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Feedly found the first article mentioning CVE-2026-76955 . See article
NVD published the first details for CVE-2026-76955
A CVSS base score of 8.8 has been assigned.
GitHub Advisories released a security advisory .
[GHSA-cc6p-qhcf-9wgq] A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware
Zyxel security advisory for buffer overflow vulnerability in certain APs, FWA7, and Security Routers
[GHSA-cc6p-qhcf-9wgq] A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware
Buffer Overflow Vulnerability in Zyxel NWA110AX Firmware
Be the first to know critical vulnerabilities
Collect, analyze, and vulnerability reports faster using AI
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
