CVE-2026-76955

A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through…

Risk score: 53/100
CVSS: 8.8 v3.1
Published: 3 Nov 2026

Open in the live forecast Today's forecast

What to know

What it is: A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could allow a LAN-based attacker to escalate privileges on an affected device.
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Yellow

CVSS 8.8 high

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerability-in-certain-aps-fwa7-and-security-routers-11-03-2026

Original description

A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could allow a LAN-based attacker to escalate privileges on an affected device.

Last activity 3 Nov 2026. Patch Forecast updates every hour.