Cyberdudebivash

        FIREWALL ZERO-DAY: Critical Zyxel Flaw (CVE-2022-30525) Allows Unauthenticated OS Command Injection and Full Network RCE     By CyberDudeBivash • September 30, 2025, 09:14 AM IST • Critical Threat Advisory   A critical unauthenticated command injection vulnerability in Zyxel firewalls, tracked as **CVE-2022-30525**, is being actively and widely exploited, allowing threat actors to achieve full remote code execution on the network's most critical security device. This flaw allows an attacker to send a single, malicious web request to a vulnerable firewall and gain complete `root` access. A compromised firewall is the ultimate nightmare scenario: the gatekeeper is now the intruder. Attackers are leveraging this access to deploy botnet malware, steal data, and pivot into internal networks to launch ransomware attacks. If your organization is using a vulnerable Zyxel firewall with an exposed management interface, you must act now, as you ar...