CVE-2026-107441
CVSS 8.8 HIGH: an out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0… EPSS 0.3% (22º percentile).
Vulnerabilità · 18 ore fa
La Patch 2 di Zyxel non bastava a proteggere i GS1900: Binarly collega a CVE-2026-107441 l’exploit associato da GreyNoise agli attacchi che hanno compromesso 996 switch. La falla è distinta dalla CVE-2026-7273 corretta a giugno.
La correzione di giugno aggiungeva un controllo solo dopo la copia rischiosa, quindi l’exploit funzionava ancora su tutte e dieci le release Patch 2. Chi raggiungeva via rete l’interfaccia di gestione poteva eseguire comandi senza autenticarsi. Zyxel ha rilasciato firmware 2.90 Patch 3 specifici per ciascun modello interessato.
GreyNoise riferisce che dagli switch sono stati sottratti configurazioni, informazioni di rete e hash delle credenziali root. Patch 3 chiude il percorso vulnerabile, ma non chiarisce se gli switch già raggiunti siano ancora compromessi né annulla il valore dei dati sottratti.
CVSS 8.8 HIGH: an out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0… EPSS 0.3% (22º percentile).
7 fonti che coprono questa storia
Zyxel Switch Patch Missed Flaw Behind Wave of Attacks
Zyxel’s June GS1900 patch did not block the exploit used against 996 switches, Binarly found
Kwetsbaarheid verholpen in Zyxel product
Zyxel heeft een kwetsbaarheid verholpen in de firmware van de Zyxel GS1900-24E netwerk switch, specifiek in versie 2.90(AAHK.2)C0 en eerder.
Zyxel GS1900 series switches that received a fix for CVE-2026-7273 are still open to an exploit attackers used.
Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day
Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests.
Zyxel patches a zero-day hiding behind an old fix
Attackers exploited a previously unknown flaw in GS1900 switches despite an earlier security update, compromising nearly 1000 devices across 48 countries.
Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
Zyxel fixes a GS1900 flaw that allows unauthenticated command execution after researchers show an earlier patch fails to block the exploit.
Zyxel fixes zero-day exploited to hack nearly 1,000 network switches
Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials.
Part of the PlainSec briefing for 2026-11-06