Multiple reports describe critical command-injection and remote-code-execution flaws across Zyxel routers, CPEs, NAS, and firewall products—some with public PoCs or active exploitation and unpatchable EoL models—prompting urgent firmware updates, mitigations, or device replacement.