An actively exploited vulnerability disclosed last week in Zyxel CPE Series devices involves routers that have reached end-of-life status, VulnCheck researchers said in a blog post released Tuesday.