SecurityOnlineDo Son
Zyxel fixes CVE-2026-7273 buffer overflow in GS1900 switches
Part of the CVE-2026-7273 story · since 18 Jun
- Thu 18 Jun, 02:31 UTC. SecurityOnline, first report. Zyxel fixes CVE-2026-7273 buffer overflow in GS1900 switches. Cites a CVE in CISA KEV. This article, 1st of 6.
- Mon 21 Sep, 20:01 UTC. CISA, its first report on the story. CISA Warns of Active Zyxel Switch Attacks via Command Flaw. Cites a CVE in CISA KEV.
- Tue 22 Sep, 04:23 UTC. SecurityOnline. Suspected Chinese Actor Exposed 18,566 Government Records in Campaign. Cites a CVE in CISA KEV.
- Tue 22 Sep, 04:23 UTC. SecurityOnline. US Authorities Warn of Zyxel Switch Flaw Exploited in Attacks. Cites a CVE in CISA KEV.
- Tue 22 Sep, 10:36 UTC. Security Affairs, its first report on the story. CISA Flags Zyxel Switch Flaw Exploited in Network Attacks. Cites a CVE in CISA KEV.
- Tue 22 Sep, 12:22 UTC. SecurityWeek, its first report on the story. Chinese Hackers Exploit Zyxel Switch Flaw to Steal Credentials. Cites a CVE in CISA KEV.
Zyxel has issued firmware patches for a critical vulnerability in its GS1900 series switches, identified as CVE-2026-7273, which carries a CVSS score of 8.8. This stack-based buffer overflow flaw allows unauthenticated attackers on the same local network to execute OS commands through a crafted HTTP request, potentially giving them control over the affected hardware.
The vulnerability affects various models in the GS1900 series running firmware version 2.90 or earlier, including GS1900-8, GS1900-24, and GS1900-48HPv2. Zyxel urges immediate firmware updates for optimal protection and suggests restricting management access to trusted devices until patches are applied.
How the story developed
6 articles from 4 outlets since 18 Jun. Quiet since 22 Sep. This was the first report.
- Thu 18 Jun, 02:31 UTC. SecurityOnline, first report. Zyxel fixes CVE-2026-7273 buffer overflow in GS1900 switches. Cites a CVE in CISA KEV. This article, 1st of 6.
- Mon 21 Sep, 20:01 UTC. CISA, its first report on the story. CISA Warns of Active Zyxel Switch Attacks via Command Flaw. Cites a CVE in CISA KEV.
- Tue 22 Sep, 04:23 UTC. SecurityOnline. Suspected Chinese Actor Exposed 18,566 Government Records in Campaign. Cites a CVE in CISA KEV.
- Tue 22 Sep, 04:23 UTC. SecurityOnline. US Authorities Warn of Zyxel Switch Flaw Exploited in Attacks. Cites a CVE in CISA KEV.
- Tue 22 Sep, 10:36 UTC. Security Affairs, its first report on the story. CISA Flags Zyxel Switch Flaw Exploited in Network Attacks. Cites a CVE in CISA KEV.
- Tue 22 Sep, 12:22 UTC. SecurityWeek, its first report on the story. Chinese Hackers Exploit Zyxel Switch Flaw to Steal Credentials. Cites a CVE in CISA KEV.
- Known exploited CVE
- No CVE
- Larger: an outlet’s first report
- Square: official source
- Coverage over time
- Quiet time, folded
Show all 6 articles as a listHide the list
- Thu 18 JunDay 01
- Zyxel fixes CVE-2026-7273 buffer overflow in GS1900 switches02:31 · SecurityOnline · First report · Exploited CVE · Known exploited CVE · This article, 1st of 6
Quiet for 14 weeks
Mon 21 SepDay 951- CISA Warns of Active Zyxel Switch Attacks via Command Flaw20:01 · CISA · official · CISA alert · Picked up again · Known exploited CVE
- Tue 22 SepDay 964
- Suspected Chinese Actor Exposed 18,566 Government Records in Campaign04:23 · SecurityOnline · Known exploited CVE
- US Authorities Warn of Zyxel Switch Flaw Exploited in Attacks04:23 · SecurityOnline · Known exploited CVE
- CISA Flags Zyxel Switch Flaw Exploited in Network Attacks10:36 · Security Affairs · Known exploited CVE
- Chinese Hackers Exploit Zyxel Switch Flaw to Steal Credentials12:22 · SecurityWeek · Known exploited CVE