Zyxel

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenAug 17, 2026
Last mentionedSep 26, 2026

Timeline

2 articles · newest first

Red Heron Exploits Critical Gitea Flaw to Steal Repositories and Deploy Linux Rootkit

Red Heron exploited Gitea CVE-2026-60004 to steal repositories and deploy the JITTERLY backdoor and SIXZUT rootkit.

GBHackersSep 26, 08:15 UTC · Sep 26, 2026Threat actorExploitedCVE-2026-600045 · 1 read

IoT Under Siege: The Anatomy of the Latest Mirai Campaign Leveraging Multiple IoT Exploits

Unit 42 tracks a Mirai botnet campaign exploiting over 20 IoT vulnerabilities in routers, cameras and DVRs to build DDoS botnets since March 2023.

Palo Alto Unit 42Aug 17, 13:04 UTC · Aug 17, 2026MalwareExploitedCVE-2019-12725 CVE-2019-17621 CVE-2019-20500+136 · 1 read

Related CVEs

by mentions

CVE-2022-2930398%9.8
Unauthenticated Command Injection in Contec SolarView Compact
published May 12, 2022Contec SolarView Compact (SV-CPT-MC310 firmware)KEVPoC ×2
CVE-2026-6000424%9.8
Unauthenticated RCE in Gitea via diffpatch API Git Hook Injection
published Aug 26, 2026GiteaKEVPoC ×5
CVE-2022-30525100%9.8
OS Command Injection in Zyxel Firewalls Enables Remote Command Execution
published May 12, 2022ZyxelKEVPoC ×3
CVE-2019-2050097%7.8
Authenticated OS Command Injection in D-Link DWL-2600AP Access Point Web Interface
published Mar 5, 2020D-Link DWL-2600AP Access Point (firmware)KEVPoC
CVE-2021-4642294%9.8
Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication
published Apr 27, 2022telesquare sdt-cs3b1 firmwarePoC ×2
CVE-2023-272403%9.8
Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip
published Mar 15, 2023tenda ax3 firmwarePoC
CVE-2022-270025%9.8
Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns_name, ddns_pwd, h_ddns、ddns_host parameters
published Mar 15, 2022commscope arris tr3300 firmwarePoC
CVE-2022-3149965%9.8
Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo
published Aug 25, 2022nortekcontrol emerge e3 firmwarePoC ×2
CVE-2022-4569977%9.8
Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as…
published Feb 10, 2023apsystems ecu-r firmwarePoC ×2
CVE-2022-3002339%8.8
Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function
published Jun 16, 2022tenda hg9 firmwarePoC

Appears with

Virlabsorganization · 1
FLIRvendor · 1
Giteavendor · 1
Netgearvendor · 1
Red Heronthreat actor · 1
Miraimalware · 1
industrial automation organizationvictim · 1
HestiaCPproduct · 1
D-Linkvendor · 1
Acronisorganization · 1
UniFiproduct · 1
Giteaproduct · 1
TP-Linkvendor · 1
Nortek Linear eMergeproduct · 1
Unit 42organization · 1
TP-Link Archerproduct · 1

Entities are extracted by the model from each article. First seen Aug 17, 2026, last mentioned Sep 26, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.