{"uuid": "49ace9cb-cd3b-4f7e-96d2-6a3c670152db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35036", "type": "seen", "source": "https://t.me/hacking_Attack/185879", "content": "On affected Zyxel firmware, a low-privileged account could call backend DAL endpoints and get back supervisor/admin account data, FTPS credentials, and TR-069 secrets. The UI could hide privileged pages, but the backend was still returning sensitive objects to the weaker role. The writeup covers the DAL endpoints, why masking values in the UI was not enough, the affected device expansion, and the patch trail. I also added a separate firmware lab around Zyxel\u2019s password generator. https://minanagehsalalma.github.io/zyxel-cve-2021-35036-super-admin-password-leak/    submitted by    /u/TheReedemer69  (https://www.reddit.com/user/TheReedemer69) \n [link] (https://www.reddit.com/gallery/1tkl31w)   [comments] (https://www.reddit.com/r/Pentesting/comments/1tkl31w/zyxel_lowpriv_router_account_exposed_superadmin/)", "creation_timestamp": "2026-09-01T20:00:10.209198Z"}