Is CVE-2026-7255 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-7255 being exploited in the wild.

How severe is CVE-2026-7255?

Medium severity, with a CVSS score of 6.5, published 12 May 2026.

Which products and versions are affected?

Zyxel WRE6505 v2 V1.00(ABDV.3)C0.

Is there a fix for CVE-2026-7255?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-7255 attacked?

It is attacked from the adjacent network, in a network appliance.

Am I affected by CVE-2026-7255?

Check whether you run Zyxel WRE6505 v2 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-7255: Zyxel WRE6505 v2 improper authentication restriction in web interface

CVE-2026-7255 · Severity: medium · CVSS 6.5 · Published 2026-05-12

The Zyxel WRE6505 v2, a wireless range extender used to expand WiFi coverage, contains a security flaw in its web management interface. This vulnerability allows an attacker on the same local network to repeatedly guess passwords without being locked out, potentially leading to unauthorized access to the device's settings. Because this product has reached its end-of-life, the manufacturer is not providing a security patch, and users are encouraged to upgrade to a supported model.

Vendors: Zyxel.

Quick answers

Is CVE-2026-7255 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-7255 being exploited in the wild.
How severe is CVE-2026-7255?: Medium severity, with a CVSS score of 6.5, published 12 May 2026.
Which products and versions are affected?: Zyxel WRE6505 v2 V1.00(ABDV.3)C0.
Is there a fix for CVE-2026-7255?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-7255 attacked?: It is attacked from the adjacent network, in a network appliance.
Am I affected by CVE-2026-7255?: Check whether you run Zyxel WRE6505 v2 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An improper restriction of excessive authentication attempts (CWE-307) exists in the web management interface of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0. An adjacent attacker on the local area network (LAN) can perform a brute-force attack against the administrative password without triggering rate-limiting or lockout mechanisms. Successful exploitation allows the attacker to bypass authentication and gain administrative control over the device. This vulnerability is marked as 'Unsupported When Assigned' because the product has reached its End of Life (EOL) status, and no official patch is expected.

Affected products

Zyxel WRE6505 v2 V1.00(ABDV.3)C0

Timeline

2026-05-12: disclosed
2026-05-12: advisory: NVD publication date

References

https://www.zyxel.com/global/en/support/end-of-life

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.