Jacob Baines

Zyxel HTTP Vulnerability - Blog - VulnCheck As a follow-up to our previous Zyxel Telnet Vulnerabilities blog, VulnCheck examines CVE-2024-40890, a recently disclosed vulnerability in the HTTP interface of many end-of-life Zyxel CPE routers.

Here is a follow-on rundown of CVE-2024-40890, affecting the HTTP interface of EOL Zyxel CPE routers. Don't forget to filter user input for `\n` 😉 Pairs quite nicely with the supervisor (backdoor) / zyuser user accounts.

vulncheck.com/blog/zyxel-h...

07.02.2025 13:42 — 👍 0    🔁 1    💬 0    📌 0

The security industry went 6-days without a new Known Exploited Vulnerability which is the longest length of time this year.

So do you think it was the threat actors or security researchers that went on holiday?

ELSE: What did we miss? 😝

#cybersecurity #infosecurity #infosec

03.12.2024 14:24 — 👍 7    🔁 3    💬 0    📌 1