This vulnerability (CVE-2026-4795) involves missing authorization controls in Zyxel GS1200-5v3 and related firmware versions up to 1.00(ACPS.2)C0. An attacker on the local area network can exploit this flaw by crafting an HTTP request that allows reading of system configuration data from a log file without authentication. The issue is classified under CWE-862 (Missing Authorization). The CVSS 3.1 base score is 6.5, with attack vector as adjacent network, low attack complexity, no privileges required, no user interaction, and impact on confidentiality only.

An unauthenticated attacker on the LAN can access sensitive system configuration information by exploiting this vulnerability. This could lead to information disclosure that may aid further attacks or reconnaissance. There is no impact on system integrity or availability reported. No known exploits are currently observed in the wild.

Patch status is not yet confirmed — check the Zyxel vendor advisory for current remediation guidance. Until a fix is available, restrict LAN access to trusted users and monitor for suspicious HTTP requests targeting the device. No official patch or workaround has been documented at this time.