# CVE-2026-7287: Zyxel NWA1100-N buffer overflow in webs binary

Source: https://junglewise.ai/threats/cve-2026-7287-zyxel-nwa1100-n-buffer-overflow-in-webs-binary  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-12. Updated: 2026-05-16  
License: CC BY 4.0 with a link back

CVE-2026-7287 · Severity: high · CVSS 7.5 · Published 2026-05-12

A security vulnerability has been identified in the Zyxel NWA1100-N wireless access point, a device used to provide Wi-Fi connectivity in business environments. An attacker can exploit this flaw to crash the device remotely, causing a total loss of internet and network connectivity for connected users. Because this product has reached its end-of-life status, no official security patches are expected to be released.

Vendors: [Zyxel](https://junglewise.ai/threats/vendors/zyxel).

## Quick answers

**Is CVE-2026-7287 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-7287 being exploited in the wild.

**How severe is CVE-2026-7287?** High severity, with a CVSS score of 7.5, published 12 May 2026.

**Which products and versions are affected?** Zyxel NWA1100-N 1.00(AACE.1)C0.

**Is there a fix for CVE-2026-7287?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-7287 attacked?** It is attacked over the network, in device firmware.

**Am I affected by CVE-2026-7287?** Check whether you run Zyxel NWA1100-N or Zyxel Nwa1100-N Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A classic buffer overflow (CWE-120) exists within the 'webs' binary of Zyxel NWA1100-N firmware version 1.00(AACE.1)C0. The vulnerability is located in several functions, including formWep(), formWlAc(), formPasswordSetup(), formUpgradeCert(), and formDelcert(), which fail to properly validate the size of input data before copying it to memory buffers. A remote, unauthenticated attacker can exploit this by sending a specially crafted HTTP request to the device's management interface. Successful exploitation results in a crash of the web service or the entire device, leading to a denial-of-service. As the product is end-of-life (EOL), Zyxel has not provided a patch.

## Affected products

- Zyxel NWA1100-N 1.00(AACE.1)C0

## Timeline

- 2026-05-12: disclosed: CVE published by Zyxel Corporation

## References

- [https://www.zyxel.com/global/en/support/end-of-life](https://www.zyxel.com/global/en/support/end-of-life)