Where
-Infinity
0

Zyxel Cloud Cnm SecumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config/xmpp_…

Risk 86
Severity
9.8
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the cloud1234 password for the a1@chopin account defa…

Risk 86
Severity
9.8
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the debia…

Risk 86
Severity
9.8
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account.

Risk 86
Severity
9.8
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account.

Risk 86
Severity
9.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within t…

Risk 35
Severity
5.9
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within t…

Risk 35
Severity
5.9
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within t…

Risk 35
Severity
5.9
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account within…

Risk 35
Severity
5.9
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within t…

Risk 35
Severity
5.9
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account.

Risk 35
Severity
5.9
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account.

Risk 35
Severity
5.9
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account.

Risk 35
Severity
5.9
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/default/axess permissions.

Risk 86
Severity
9.8
First published (updated )

Zyxel Cloud CNM SecuManagerSQL Injection

Risk 27
Severity
5.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows escape-sequence injection into the /var/log/axxmpp…

Risk 27
Severity
5.3
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests.

Risk 43
Severity
7.5
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests.

Risk 43
Severity
7.5
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Str…

Risk 27
Severity
5.3
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Str…

Risk 27
Severity
5.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Zyxel Cloud CNM SecuManagerXSS

Risk 38
Severity
6.1
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded opt/axess/AXAssets/default_axess/axess/TR…

Risk 43
Severity
7.5
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated update_all_realm_license API.

Risk 43
Severity
7.5
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user API.

Risk 27
Severity
5.3
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_install_user_key API.

Risk 27
Severity
5.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_user_id_and_key API.

Risk 27
Severity
5.3
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_get_instances_for_update API.

Risk 27
Severity
5.3
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a /live/GLOBALS API with the CLOUDCNM key.

Risk 27
Severity
5.3
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the q6xV4aW8bQ4cfD-b password for the axiros account.

Risk 86
Severity
9.8
First published (updated )

Zyxel Cloud CNM SecuManagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication.

Risk 27
Severity
5.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203