I Found a Pre-Auth Captive-Portal Bypass in Zyxel Enterprise APs. Here's How I Emulated the Firmware for CVE-2026-8508
I found this while reversing Zyxel's WAX650S firmware and following the guest Wi-Fi social-login path. The backend trusted browser-submitted Facebook identity fields instead of validating the access token server-side, le
📄
This source provides headlines only. Use the button below to read the complete article on the original site.
📰 Read the original article on r/hacking
Originally published by r/hacking. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.