logo

Zyxel warns of bad signature update causing firewall boot loops

ID: 9b860e39-17c1-5ec3-8c5b-462e067c2282

STIX ID: report--9b860e39-17c1-5ec3-8c5b-462e067c2282

Feed Name: Bleeping Computer

Date Published: 2025-01-24

Date Updated: 2026-04-20

Author: Lawrence Abrams

...
...

Zyxel reports that a faulty Application Signature Update pushed on Jan 24–25 caused USG FLEX and ATP Series firewalls (ZLD, with active security licenses) to experience reboot loops, high CPU, ZySH daemon errors, and login failures; Nebula-managed devices and USG FLEX H (uOS) are unaffected. Recovery requires on-site console access via RS232 to back up configurations, load a special firmware, and then restore settings via the web GUI; Zyxel provided step-by-step guidance and scheduled support sessions, emphasizing this is not a CVE or security issue.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.