Skip to content
Buffer Overflow Vulnerability in Zyxel NWA110AX Firmware (CVE-2026-76955)

Buffer Overflow Vulnerability in Zyxel NWA110AX Firmware (CVE-2026-76955)

First seen 3 Nov 2026, 09:42 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 3, 2026 at 18:16 UTC

A buffer overflow vulnerability identified as CVE-2026-76955 affects the zdp_wtp binary in Zyxel NWA110AX firmware versions up to 7.12(ABTG.0)C0. This flaw allows unauthenticated LAN-based attackers to escalate privileges on affected devices. Zyxel has released patches for the vulnerable firmware versions and advises users to update immediately. Currently, there is no evidence of public proof-of-concept code or reported. The CVSS base score for this vulnerability is 8.8, indicating a high severity level. Users are also advised to restrict network access to trusted LAN segments and monitor for suspicious activity targeting the zdp_wtp binary process.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-11-03
CVE-2026-76955 published
Zyxel disclosed a buffer overflow vulnerability in the zdp_wtp binary affecting specific firmware versions.
Zyxel
2026-11-03
Patches released
Zyxel released patches for the affected firmware versions to mitigate the vulnerability.
Zyxel

More articles in this cluster (4)

Following this threat?

Track Zyxel and CVE-2026-76955 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 3

Common questions

Which firmware versions are affected?
The vulnerability affects Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0.
What should I do to protect my devices?
Update to a firmware version newer than 7.12(ABTG.0)C0 and restrict network access to trusted segments.
Is there any evidence of exploitation?
Currently, there is no evidence of public proof-of-concept or active exploitation reported.