CVE-2025-8693

High · 8.8

CVSS

8.8

EPSS

1.0%

Published

Nov 18, 2025

CISA due date

—

The record

A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attacker to execute operating system (OS) commands on an affected device.

Affected packages

Ecosystem	Package	Introduced	Fixed