๐Ÿ” CVE Alert

CVE-2026-3870

MEDIUM 6.5
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
4th

A buffer overflow vulnerability in the UPnP AddPortMapping() command in Zyxel VMG4005-B50B firmware versions through 5.13(ABRL.5.4)C0 could allow an adjacent attacker to trigger a temporary denial-of-service (DoS) condition affecting the UPnP function of the affected device.

CWE CWE-120
Vendor zyxel
Product vmg4005-b50b firmware
Published Jun 2, 2026
Last Updated Jun 2, 2026
Stay Ahead of the Next One

Get instant alerts for zyxel vmg4005-b50b firmware

Be the first to know when new medium vulnerabilities affecting zyxel vmg4005-b50b firmware are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Affected Versions

Zyxel / VMG4005-B50B firmware
<= 5.13(ABRL.5.4)C0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
zyxel.com: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerabilities-in-the-upnp-function-of-certain-4g-lte-5g-nr-cpe-and-dsl-ethernet-cpe-06-02-2026