๐Ÿ” CVE Alert

CVE-2025-7673

CRITICAL 9.8
CVSS Score
9.8
EPSS Score
0.0%
EPSS Percentile
0th

A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)C0 could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and potentially execute arbitrary code by sending a specially crafted HTTP request.

CWE CWE-120
Vendor zyxel
Product vmg8825-t50k firmware
Published Jul 16, 2025
Last Updated Feb 26, 2026
Stay Ahead of the Next One

Get instant alerts for zyxel vmg8825-t50k firmware

Be the first to know when new critical vulnerabilities affecting zyxel vmg8825-t50k firmware are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

Zyxel / VMG8825-T50K firmware
< V5.50(ABOM.5)C0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
zyxel.com: https://www.zyxel.com/service-provider/global/en/zyxel-security-advisory-remote-code-execution-and-denial-service-vulnerabilities-cpe