CISA Adds One Known Exploited Vulnerability to Catalog
CISA added actively exploited Zyxel GS1900 stack buffer overflow CVE-2026-7273 to the Known Exploited Vulnerabilities catalog.
CISA added CVE-2026-7273, a stack-based buffer overflow in Zyxel GS1900 Series switches, to the Known Exploited Vulnerabilities Catalog after evidence of active exploitation. The agency describes this class of flaw as a frequent attack vector that can grant total control of publicly exposed assets. Binding Operational Directive 26-04 requires Federal Civilian Executive Branch agencies to prioritize remediation of such KEV entries and to check for compromise before the patch. CISA urges all organizations to remediate KEV vulnerabilities using risk-based vulnerability management.
- CVE-2026-7273 is a stack-based buffer overflow in Zyxel GS1900 switches.
- CISA cites evidence of active exploitation for the KEV addition.
- BOD 26-04 requires FCEB agencies to prioritize exposed assets granting total control.
- Agencies must check whether systems were compromised before patching.
- CVEs
- CVE-2026-7273
- Vendors
- Zyxel
- Products
- GS1900 Series Switches
- Organizations
- CISA
- Countries
- United States
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-7273 | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | 8.8 | 3% | KEVPoC | KEV |
From the original article
1 min read at cisa.govCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.