Zyxel GS1900 switches remain vulnerable to root command execution
Zyxel GS1900 Patch 2 fails to block zero-day allowing unauthenticated root access; Patch 3 fixes CVE-2026-107441
Stories per day · 30 days
2 RSS
Relatedauthorization-bypass1barracuda1command-injection1email-security-gateway1gs19001rce1zero-day1zyxel1
4 stories, newest first · one card per story
Stories tagged #firmware-update
Barracuda security appliances hit by two critical vulnerabilities
Patches released for CVE-2026-116606 authorization bypass and CVE-2026-111560 command injection in Barracuda Email Security Gateway and other products.
1
WatchGuard security advisory (AV26-972)
Canadian Cyber Centre relayed three WatchGuard AP vulnerabilities, including unauthenticated API access and command injection, fixed before version 3.4.8.
Nintendo Switch QR Code Vulnerability Lets Nearby Attackers Execute Unauthorized Code
Nintendo patched CVE-2026-82079 (CVSS 8.4), a stack buffer overflow in Switch local wireless pairing enabling nearby attackers to execute code.
3