CVE-2026-8508
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an attacker on the WLAN to bypass captive portal authentication.
Risk Assessment
The risk is the possibility of unauthorized network access by bypassing the authentication gateway, which could compromise network and data security.
Recommendation
It is recommended to upgrade the firmware to the latest patched version and monitor the network for unauthorized access attempts.
Other vulnerabilities in Zyxel WAX650S
Original NVD description (English source)
An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an attacker on the WLAN to bypass captive portal authentication.