This vulnerability (CVE-2026-7257) affects Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 and is categorized under CWE-922 (Insecure Storage of Sensitive Information). It allows a local attacker with administrator privileges to download and decrypt a backup configuration file due to insecure storage practices. The CVSS v3.1 base score is 4.4, reflecting a medium severity with high confidentiality impact but no impact on integrity or availability. No vendor advisory or patch is currently available, and no known exploits have been reported.

The vulnerability could lead to unauthorized disclosure of sensitive information stored in the backup configuration file if an attacker has local administrator access. This exposure could compromise confidentiality but does not affect system integrity or availability. Since exploitation requires administrator privileges, the risk is limited to trusted users or attackers who have already gained elevated access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local administrator access to trusted personnel only and avoid creating or distributing backup configuration files unnecessarily. Monitor vendor communications for updates regarding patches or mitigations.