{"id":"CVE-2026-76955","published":"2026-11-03T02:16:53.720","lastModified":"2026-11-03T02:16:53.720","description":"A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could allow a LAN-based attacker to escalate privileges on an affected device.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-120"],"vendors":[],"products":[],"references":[{"url":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerability-in-certain-aps-fwa7-and-security-routers-11-03-2026","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A classic stack-based buffer overflow in the zdp_wtp binary of Zyxel NWA110AX access points (firmware ≤7.12(ABTG.0)C0) allows a LAN-based attacker to overwrite memory and potentially execute arbitrary code with elevated privileges.","exploitability":"Exploitation requires network access to the affected device’s LAN interface and knowledge of the vulnerable service; no authentication is needed, but reliability may be low due to lack of public exploit details.","blast_radius":"Successful exploitation could grant an attacker full control of the access point, enabling lateral movement within the internal network, data interception, or denial of service.","remediation":"Upgrade to firmware version 7.12(ABTG.0)C1 or later, as this is the first fixed version following the affected range.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["buffer-overflow","privilege-escalation","lan-based","embedded-device"],"model":"garnet-coder","analyzedAt":"2026-11-03T09:59:41.946Z"}}