Vulnerability details
CVE-2026-107441
Zyxel GS1900-10HP firmwareZyxel GS1900-16 firmwareZyxel GS1900-24 firmwareZyxel GS1900-24E firmwareZyxel GS1900-24EP firmwareZyxel GS1900-48 firmware
CVSS 3.1
8.8High
Official description
An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an unauthenticated adjacent attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.
Related news
-
Week in review: Refrigeration cyberattacks hit European retailers again, Patch Tuesday forecast
Help Net Security · 3 d ago
-
Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441)
Help Net Security · 5 d ago
-
Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day
SecurityWeek · 5 d ago
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.8High | 3.1 | CVEProject cvelistV5 (CNA) (Zyxel) | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Zyxel | GS1900-10HP firmware | <= 2.90(AAZI.2)C0 | CVEProject cvelistV5 (CNA) |
| Zyxel | GS1900-16 firmware | <= 2.90(AAHJ.2)C0 | CVEProject cvelistV5 (CNA) |
| Zyxel | GS1900-24 firmware | <= 2.90(AAHL.2)C0 | CVEProject cvelistV5 (CNA) |
| Zyxel | GS1900-24E firmware | <= 2.90(AAHK.2)C0 | CVEProject cvelistV5 (CNA) |
| Zyxel | GS1900-24EP firmware | <= 2.90(ABTO.2)C0 | CVEProject cvelistV5 (CNA) |
| Zyxel | GS1900-48 firmware | <= 2.90(AAHN.2)C0 | CVEProject cvelistV5 (CNA) |
| Zyxel | GS1900-48HPv2 firmware | <= 2.90(ABTQ.2)C0 | CVEProject cvelistV5 (CNA) |
| Zyxel | GS1900-8 firmware | <= 2.90(AAHH.2)C0 | CVEProject cvelistV5 (CNA) |
| Zyxel | GS1900-8HP firmware | <= 2.90(AAHI.2)C0 | CVEProject cvelistV5 (CNA) |
| Zyxel | GS1900-HPv2 firmware | <= 2.90(ABTP.2)C0 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-11-03
- Last updated
- 2026-11-05
- State
- Published
- Assigner (CNA)
- Zyxel
- Kolun priority
- 25 · Low
Exploit prediction (EPSS)
0.29%
Probability of exploitation in 30 days
22%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-787Out-of-bounds write