Applied Cybernetics Group
Threat intel → detection pipeline
Friday, September 18, 2026
Data as of 13:09 UTC

known ransomware use

Zyxel Multiple Firewalls Path Traversal Vulnerability

Added to KEV
2024-12-03
Federal due date
2024-12-24
Vendor
Zyxel
Product
Multiple Firewalls
EPSS
86.4th percentile (score 0.029, as of 2026-09-16)
NVD CVSS v3.1
7.5 (HIGH)
Ransomware use
Known
Upstream
https://nvd.nist.gov/vuln/detail/CVE-2024-11667

CISA short description

Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an attacker to download or upload files via a crafted URL.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

NVD description

A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL.

EPSS percentile is the FIRST.org exploit-probability ranking as of the date noted above; it moves daily. CVSS reflects NVD's analysis at time of publication.