CVE-2026-8508 in WAX650S

Riassunto

di MITRE • 04/08/2026

An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an attacker on the WLAN to bypass captive portal authentication.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: Zyxel
• Prenotare: 14/05/2026
• Divulgazione: 04/08/2026
• Moderazione: accettato
• Voce: VDB-385743
• CPE: pronto
• CWE: CWE-287 (confermato)
• CVSS: 10.0 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: molto alto

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-8508
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-8508
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-8508/