CVE-2022-30526

7.8 highEPSS 1.1%

High (7.8) in zyxel. EPSS 1.1% chance of exploitation in the next 30 days.

A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 through 5.30, USG FLEX 200 firmware versions 4.50 through 5.30, USG FLEX 500 firmware versions 4.50 through 5.30, USG FLEX 700 firmware versions 4.50 through 5.30, USG FLEX 50(W) firmware versions 4.16 through 5.30, USG20(W)-VPN firmware versions 4.16 through 5.30, ATP series firmware versions 4.32 through 5.30, VPN series firmware versions 4.30 through 5.30, USG/ZyWALL series firmware versions 4.09 through 4.72, which could allow a local attacker to execute some OS commands with root privileges in some directories on a vulnerable device.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2022-07-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zyxel:atp100_firmware
zyxel:atp100w_firmware
zyxel:atp200_firmware
zyxel:atp500_firmware
zyxel:atp700_firmware
zyxel:atp800_firmware
zyxel:usg20-vpn_firmware
zyxel:usg20w-vpn_firmware
zyxel:usg40_firmware
zyxel:usg40w_firmware
zyxel:usg60_firmware
zyxel:usg60w_firmware
zyxel:usg_2200-vpn_firmware
zyxel:usg_flex_100w_firmware
zyxel:usg_flex_200_firmware
zyxel:usg_flex_500_firmware
zyxel:usg_flex_50w_firmware
zyxel:usg_flex_700_firmware
zyxel:vpn1000_firmware
zyxel:vpn100_firmware
zyxel:vpn300_firmware
zyxel:vpn50_firmware
zyxel:zywall_1100_firmware
zyxel:zywall_110_firmware
zyxel:zywall_310_firmware

References

Check your stack JSON