2026-08-04security-advisory
Zyxel patches CVE-2026-6837 and CVE-2026-8508 across AP families
Zyxel published a broad AP advisory with model-level fixed firmware targets, covering command injection in `export-cgi` and captive-portal authentication bypass in `social_login.cgi` across current NWA, WAX, and WBE families.
Why it mattersThe official table is unusually usable for AP operators because Zyxel lists affected and patched versions by family instead of falling back to generic “latest firmware” wording.
Current fixed version calloutListed AP models move to 7.12(...0)C0 or 7.40(...1)C0 depending on family, with WAC500H handled by hotfix on request.
2026-05-12security-advisory
Fortinet FG-IR-26-131 FortiAP CLI command injection security update
Fortinet published a FortiAP-focused PSIRT advisory with unusually clean fixed-version coverage for access-point operators, making it a good selective AP record even though the issue requires authenticated privileged CLI access.
Why it mattersFortinet names the affected FortiAP, FortiAP-U, and FortiAP-W2 branches and gives concrete fixed versions for active trains instead of vague “upgrade to latest” guidance.
Current fixed version calloutFortiAP 7.6.3+, FortiAP 7.4.6+, FortiAP-U 7.0.6+, FortiAP-W2 7.4.5+; older 7.2/6.4 trains should move via Fortinet's upgrade path.
2025-03-20release-notes
TP-Link Omada SDN Controller v5.15.20 pre-release
Current indexed AP-adjacent coverage comes from Omada’s official controller release notes, which are useful because they often carry security hardening details before model-by-model device pages are normalized.
Why it mattersOmada deployments often span APs, gateways, and controllers, so controller release notes are a practical operational starting point.
Current fixed version calloutOmada SDN Controller v5.15.20.x
2025-01-14security-advisory
Zyxel AP privilege management security update
Zyxel is one of the stronger AP-oriented sources in the current research pack because the official advisory explicitly ties affected AP models to patched firmware trains and published download paths.
Useful coverage patternVendor advisories that name affected AP families and the exact fixed firmware train are more valuable than generic “latest firmware” pages.
Research statusStructured AP coverage exists in the dataset and is ready for further expansion without changing the site model.