CVE-2025-8078 | Zyxel ATP/USG FLEX/USG FLEX 50/USG20 -VPN String os command injection

October 21, 2025 Yanac

A vulnerability categorized as critical has been discovered in Zyxel ATP, USG FLEX, USG FLEX 50 and USG20 -VPN. This affects an unknown function of the component String Handler. The manipulation results in os command injection.

This vulnerability is identified as CVE-2025-8078. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More