Weekly recap: OpenSSH SSHole probed, Zyxel zero-day hits switches
Twenty OpenSSH attempts came from 13 IPs, and a Zyxel flaw was used on nearly 1,000 switches.
74
Product
GS1900
- Mentions · 7d6
- Mentions · 30d7
- All mentions11
- First seenSep 21, 2026
- Last mentioned2d ago
Timeline
11 articles · newest firstZyxel GS1900 June patch missed flaw behind attacks on 996 switches
Binarly says all 10 June firmware releases still allow unauthenticated root commands; Zyxel shipped a later fix.
78
Zyxel GS1900 Zero-Day Patch 3 Fixes Bypassed Bug
Zyxel GS1900 zero-day has been addressed in Patch 3.
30
Zyxel Patches Zero-Day Vulnerability in GS1900 Switches
Zyxel released firmware updates for CVE-2026-107441 affecting GS1900 switches after it was exploited in 48 countries.
80
Zyxel GS1900 switches remain vulnerable to root command execution
Zyxel GS1900 Patch 2 fails to block zero-day allowing unauthenticated root access; Patch 3 fixes CVE-2026-107441
75
Hackers Exploit Zyxel GS1900 Zero-Day Vulnerability
Attackers compromised nearly 1,000 Zyxel GS1900 switches via pre-authentication RCE before Zyxel patched the flaw.
85
Zyxel fixes zero-day exploited to hack nearly 1,000 network switches
Zyxel patched CVE-2026-107441 after Kapibala exploited it to compromise 996 GS1900 switches and steal credentials; the flaw bypassed a prior patch for CVE-2026-7273.
75
Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents
Weekly roundup leads with a Gyazo breach of 23.6 million users and the TASK#STOMP document-stealing backdoor.
80
Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers
Chinese hackers exploited ZyXEL CVE-2026-7273 on GS1900 switches in 48 countries; CISA added it to KEV.
82
U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog
CISA added exploited Zyxel GS1900 switch flaw CVE-2026-7273 to the KEV catalog, with a September 24 fix deadline.
74
Zyxel security advisory (AV26-603) – Update 1
Canada's Cyber Centre says Zyxel GS1900 buffer overflow CVE-2026-7273 is now in CISA's KEV catalog.
71
Related CVEs
by mentions- CVE-2026-72733%8.8Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
- Out-of-bounds write in Zyxel GS1900-24E CGI up to 2.90(AAHK.2)C0
- CVE-2026-8510254%9.8Unauthenticated RCE in Check Point Quantum Security Gateway via certificate flaw
- CVE-2026-9361692%9.8Unauthenticated RCE in Check Point Management Server via Directory Traversal and File Upload
- CVE-2026-12315817%8.1Password bypass in OpenSSH before 10.6p2 on musl without PAM
- CVE-2026-109518<1%7.7Man-in-the-middle RCE in APT on Debian and Ubuntu
Appears with
- Zyxelvendor · 11
- CISAorganization · 4
- Red Heronthreat actor · 4
- GreyNoiseorganization · 3
- JITTERLYmalware · 2
- SIXZUTmalware · 2
- Kapibalathreat actor · 2
- Helpfeelvendor · 1
- Rust Projectvictim · 1
- Transluceorganization · 1
- DarkMemalware · 1
- XLaborganization · 1
- CERT-Inorganization · 1
- Crafty Falconthreat actor · 1
- OPSSHIELDvendor · 1
- ISCASorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.