Is CVE-2026-12489 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-12489?

CVE-2026-12489 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-12489

Description

An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0 could allow an authenticated attacker to escalate privileges by modifying the login_privilege data on an affected device.