CISA Flags Actively Exploited Flaw in Zyxel GS1900 Switches
CISA added actively exploited stack buffer overflow CVE-2026-7273 in Zyxel GS1900-48HPv2 switches to its KEV catalog with a September 24 remediation deadline.
CISA added CVE-2026-7273, a stack-based buffer overflow in the CGI program of Zyxel GS1900-48HPv2 switches (firmware up to 2.90(ABTQ.1)C0), to the KEV catalog on September 21, 2026, citing active exploitation. The flaw carries a CVSS v3.1 score of 8.8 and lets an unauthenticated attacker on an adjacent network execute OS commands via a crafted HTTP request to the management interface. Federal agencies must apply mitigations or stop using affected products by September 24 under BOD 26-04, including forensic triage of exposed assets.
- KEV addition September 21 with remediation deadline September 24, 2026
- Unauthenticated adjacent-network attacker can execute OS commands via HTTP
- Affects Zyxel GS1900-48HPv2 firmware up to 2.90(ABTQ.1)C0, CVSS 8.8
- Compromise enables traffic interception, credential theft, and lateral movement
- CVEs
- CVE-2026-7273
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-7273 | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | 8.8 | 3% | KEVPoC | KEV |
From the original article
2 min read at gbhackers.com
The U. S. Cybersecurity and Infrastructure Security Agency (CISA) has included a high-severity vulnerability affecting Zyxel GS1900 Series switches in its Known Exploited Vulnerabilities (KEV) Catalog.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.