# CVE-2026-7257: Zyxel WRE6505 v2 Insecure Storage in Configuration File

Source: https://junglewise.ai/threats/cve-2026-7257-zyxel-wre6505-v2-insecure-storage-in-configuration-file  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-12. Updated: 2026-05-16  
License: CC BY 4.0 with a link back

CVE-2026-7257 · Severity: medium · CVSS 4.4 · Published 2026-05-12

A security vulnerability exists in the Zyxel WRE6505 v2 WiFi extender, a device used to expand wireless network coverage. An attacker with administrative access to the device can download and decrypt the system's backup configuration file. This could lead to the exposure of sensitive settings or credentials stored within the device configuration.

Technologies: [Zyxel Wre6505](https://junglewise.ai/threats/technologies/wre6505), [Zyxel Wre6505 Firmware](https://junglewise.ai/threats/technologies/wre6505-firmware). Vendors: [Zyxel](https://junglewise.ai/threats/vendors/zyxel).

## Quick answers

**Is CVE-2026-7257 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-7257 being exploited in the wild.

**How severe is CVE-2026-7257?** Medium severity, with a CVSS score of 4.4, published 12 May 2026.

**Which products and versions are affected?** Zyxel WRE6505 v2 firmware V1.00(ABDV.3)C0.

**Is there a fix for CVE-2026-7257?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-7257 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-7257?** Check whether you run Zyxel Wre6505, Zyxel WRE6505 v2 firmware or Zyxel Wre6505 Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 suffers from an insecure storage vulnerability (CWE-922) within its configuration management component. The vulnerability allows a local attacker who has already obtained high-privilege (administrator) access to extract and decrypt the backup configuration file. This occurs because the sensitive information within the configuration file is not sufficiently protected against decryption by authorized local users. As the product is marked as 'Unsupported When Assigned,' no official patch is expected, and users are encouraged to follow Zyxel's end-of-life migration paths.

## Affected products

- Zyxel WRE6505 v2 firmware V1.00(ABDV.3)C0

## Timeline

- 2026-05-12: disclosed: Initial publication of the CVE record

## References

- [https://www.zyxel.com/global/en/support/end-of-life](https://www.zyxel.com/global/en/support/end-of-life)

## Related threats

- [Zyxel WRE6505 v2 command injection in CGI program](https://junglewise.ai/threats/cve-2026-7256-zyxel-wre6505-v2-command-injection-in-cgi-program)
- [Zyxel WRE6505 v2 improper encoding DoS in CGI program](https://junglewise.ai/threats/cve-2026-6058-zyxel-wre6505-v2-improper-encoding-dos-in-cgi-program)