CVE-2026-107441

Vendor

Zyxel

Product

GS1900-24E firmware, GS1900-8 firmware, GS1900-8HP firmware, GS1900-10HP firmware

CVSS v3.1

8.8 AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003 (p22)

Weakness

CWE-787

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 45
   Research Binarly 2d ago

   Pre-Auth RCE in Zyxel GS1900 Exploited in the Wild as a Zero-Day

   GreyNoise and CISA KEV linked this Zyxel GS1900 exploit to CVE-2026-7273, but it hits a zero-day. We cover the actor, JITTERLY, SIXZUT, and the exploit.

   Exploited CVE-2026-7273CVE-2026-107441 Zyxel
2. 28
   CCCS advisory CCCS 2d ago

   Zyxel security advisory (AV26-1114)

   CVE-2026-107441 Zyxel
3. 28
   CVE NVD 2d ago

   An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an unauthenticated…

   An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an unauthenticated adjacent attacker to exploit the flaw and potentially execute OS commands via a…

   CVSS 8.8 CVE-2026-107441 Zyxel
4. 29
   News SecurityWeek 14h ago

   Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day

   Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests. The post Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day appeared first on…

   CVE-2026-107441 Zyxel