Zyxel security advisory (AV26-603) – Update 1
Canada's Cyber Centre says Zyxel GS1900 buffer overflow CVE-2026-7273 is now in CISA's KEV catalog.
The Canadian Centre for Cyber Security updated advisory AV26-603 after CISA added CVE-2026-7273 to the Known Exploited Vulnerabilities catalog on September 21, 2026. Zyxel first published the advisory on June 16, 2026, for vulnerabilities in multiple versions and models of GS1900 series switches. The listed issue is a stack-based buffer overflow. The Cyber Centre urges administrators to review Zyxel's advisory and CISA's KEV entry and apply updates.
- CVE-2026-7273 is a stack-based buffer overflow in GS1900 switches.
- CISA added the flaw to the KEV catalog on September 21, 2026.
- Zyxel's original advisory covering multiple GS1900 versions dates to June 16, 2026.
- CVEs
- CVE-2026-7273
- Vendors
- Zyxel
- Products
- GS1900
- Organizations
- Canadian Centre for Cyber SecurityCISA
- Countries
- CanadaUnited States
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-7273 | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | 8.8 | 3% | KEVPoC | KEV |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-603 Date: June 16, 2026 Updated: September 21, 2026 On June 16, 2026, Zyxel published a security advisory to address vulnerabilities in the following products: GS1900 series switches – multiple versions and models Update 1 On September 21, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-7273 to their Known Exploited Vulnerabilities (KEV) Database.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.