CVE-2026-76955

Summary

A classic stack-based buffer overflow in the zdp_wtp binary of Zyxel NWA110AX access points (firmware ≤7.12(ABTG.0)C0) allows a LAN-based attacker to overwrite memory and potentially execute arbitrary code with elevated privileges.

Exploitability

Exploitation requires network access to the affected device’s LAN interface and knowledge of the vulnerable service; no authentication is needed, but reliability may be low due to lack of public exploit details.

Blast radius

Successful exploitation could grant an attacker full control of the access point, enabling lateral movement within the internal network, data interception, or denial of service.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to firmware version 7.12(ABTG.0)C1 or later, as this is the first fixed version following the affected range.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.