Zyxel security advisory (AV26-092)

Serial number: AV26-092
Date: February 5, 2026

On February 5, 2026, Zyxel published a security advisory to address a vulnerability in the following products:

• ATP – versions ZLD V5.35 to V5.41
• USG FLEX – versions ZLD V5.35 to V5.41
• USG FLEX 50(W)/ USG20(W)-VPN – versions ZLD V5.35 to V5.41

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Zyxel security advisory for post-authentication command injection vulnerability in the DDNS configuration CLI command of ZLD firewalls
• Zyxel Advisories