CVE-2026-7257: Medium severity Zyxel WRE6505 v2 firmware vulnerability

Published May 12, 2026

Updated

UNSUPPORTED WHEN ASSIGNED An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow a local attacker with administrator privileges to download and decrypt a backup configuration file.

Affected Software

3 affected components

Zyxel WRE6505 v2 firmware=V1.00(ABDV.3)C0

All of the following

Zyxel Wre6505 Firmware=v1.00\(abdv.3\)c0

Zyxel WRE6505=v2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Zyxel WRE6505 v2 firmware to a version that resolves this vulnerability.
Fixed in V1.00(ABDV.3)C0

Event History

May 12, 2026

CVE Published

via MITRE·03:31 AM

Data Sourced

via MITRE·03:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:16 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-7257?

CVE-2026-7257 is classified as a moderate severity vulnerability.

How do I fix CVE-2026-7257?

To fix CVE-2026-7257, update the Zyxel WRE6505 v2 firmware to a secure version that addresses this vulnerability.

Who is affected by CVE-2026-7257?

Any user of the Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 is affected by CVE-2026-7257.

What type of vulnerability is CVE-2026-7257?

CVE-2026-7257 is an insecure storage of sensitive information vulnerability.

Can a local attacker exploit CVE-2026-7257?

Yes, a local attacker with administrator privileges can exploit CVE-2026-7257.