
Hackers Exploit Zyxel GS1900 Zero-Day Vulnerability
Attackers compromised nearly 1,000 Zyxel GS1900 switches via pre-authentication RCE before Zyxel patched the flaw.
6 stories, newest first · one card per story

Attackers compromised nearly 1,000 Zyxel GS1900 switches via pre-authentication RCE before Zyxel patched the flaw.

Patch for CVE-2026-7273 left switches vulnerable to new CVE-2026-107441 remote root command execution.
Cambium cnMatrix EX3024F 6.2.1-r4 SSL CSR field allows command injection to root RCE.

Zyxel disclosed an active exploitation of a stack-based buffer overflow in its GS1900 switch firmware (CVE-2026-7273), enabling OS command execution.

Nintendo patched CVE-2026-82079 (CVSS 8.4), a stack buffer overflow in Switch local wireless pairing enabling nearby attackers to execute code.

Nintendo patched CVE-2026-82079, a CVSS 7.0 stack buffer overflow in original Switch local wireless allowing nearby code execution via QR-code workflows.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views