Vendor
Zyxel
No CISA KEV deadline is open. CISA last added a Zyxel CVE on 21 Sep.
Tracked since 25 Feb · latest article 22 Sep · RSS · API
That product is not in Zyxel’s coverage, so the whole vendor is shown.
0Open KEV deadlines
None open
1Added to KEV · 90 days
of 13 in the full CISA catalogue · all time
0High exploit odds · current
EPSS top 5%, not in KEV
2Articles · 7 days
usual rate
Exploited, by due date13
Zyxel CVEs in CISA KEV with their federal deadlines. None is open.
| CVE | Product | Added | Federal deadline | Articles |
|---|---|---|---|---|
| In CISA KEVCVE-2026-7273 | GS1900 Series Switches | 21 Sep | Passed 24 Sep | 8 |
| In CISA KEVCVE-2024-40890 | DSL CPE Devices | 11 Feb | Passed 4 Mar | – |
| In CISA KEVCVE-2024-40891 | DSL CPE Devices | 11 Feb | Passed 4 Mar | – |
| In CISA KEVCVE-2024-11667Ransomware | Multiple Firewalls | 3 Dec | Passed 24 Dec | – |
| In CISA KEVCVE-2017-6884Ransomware | EMG2926 Routers | 18 Sep | Passed 9 Oct | – |
| In CISA KEVCVE-2017-18368 | P660HN-T1A Routers | 7 Aug | Passed 28 Aug | – |
| In CISA KEVCVE-2023-27992 | Multiple Network-Attached Storage (NAS) Devices | 23 Jun | Passed 14 Jul | – |
| In CISA KEVCVE-2023-33009 | Multiple Firewalls | 5 Jun | Passed 26 Jun | – |
| In CISA KEVCVE-2023-33010 | Multiple Firewalls | 5 Jun | Passed 26 Jun | – |
| In CISA KEVCVE-2023-28771 | Multiple Firewalls | 31 May | Passed 21 Jun | – |
| In CISA KEVCVE-2022-30525 | Multiple Firewalls | 16 May | Passed 6 Jun | – |
| In CISA KEVCVE-2020-9054 | Multiple Network-Attached Storage (NAS) Devices | 25 Mar | Passed 15 Apr | – |
| In CISA KEVCVE-2020-29583 | Multiple Products | 3 Nov | Passed 3 May | – |
Patch cadence and exploit odds
How often CISA adds Zyxel CVEs, how many have a fix, and where their exploit odds sit.
Added to CISA KEV per quarter
Show as tableHide table
| Quarter | Added |
|---|---|
| Q1 2025 | 2 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 1 |
| Q4 2026 | 0 |
Fix listed
6 of 6 CVEs in coverage
Every CVE in coverage has a fix recorded.
EPSS percentile of each CVE
One dot per CVE; a red diamond marks those in CISA KEV.
Show as tableHide table
| CVE | EPSS percentile |
|---|---|
| CVE-2026-7273 | 86.4 |
| CVE-2025-11848 | 81.5 |
| CVE-2025-11847 | 79.9 |
| CVE-2025-13943 | 75 |
| CVE-2025-13942 | 67.4 |
| CVE-2026-1459 | 61.4 |
| CVE-2026-107441 | 22 |
Coverage8 articles · all time
The latest 10 articles naming Zyxel, in the shared story grammar.
Developinglatest 40 minutes ago10 articles5 outlets
10 articles from 5 outlets since 25 Feb. Picked up again today after 6 weeks quiet.
- Wed 25 Feb, 21:41 UTC. Security Affairs, first report. Zyxel fixes critical UPnP RCE affecting a dozen router models.
- Thu 26 Feb, 12:26 UTC. SecurityWeek, its first report on the story. Zyxel patches critical UPnP RCE flaw in 18 routers and extenders.
- Thu 18 Jun, 02:31 UTC. SecurityOnline, its first report on the story. Zyxel fixes CVE-2026-7273 buffer overflow in GS1900 switches. Cites a CVE in CISA KEV.
- Mon 21 Sep, 20:01 UTC. CISA, its first report on the story. CISA Warns of Active Zyxel Switch Attacks via Command Flaw. Cites a CVE in CISA KEV.
- Tue 22 Sep, 04:23 UTC. SecurityOnline. Suspected Chinese Actor Exposed 18,566 Government Records in Campaign. Cites a CVE in CISA KEV.
- Tue 22 Sep, 04:23 UTC. SecurityOnline. US Authorities Warn of Zyxel Switch Flaw Exploited in Attacks. Cites a CVE in CISA KEV.
- Tue 22 Sep, 10:36 UTC. Security Affairs. CISA Flags Zyxel Switch Flaw Exploited in Network Attacks. Cites a CVE in CISA KEV.
- Tue 22 Sep, 12:22 UTC. SecurityWeek. Chinese Hackers Exploit Zyxel Switch Flaw to Steal Credentials. Cites a CVE in CISA KEV.
- Wed 4 Nov, 03:30 UTC. SecurityOnline. Binarly warns of exploited Zyxel GS1900 switch zero day.
- Wed 4 Nov, 04:52 UTC. cybersixt, its first report on the story. Zyxel's patch missed the switch flaw attackers were exploiting.
- Known exploited CVE
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Square: official source
- Coverage over time
- Quiet time, folded
Show all 10 articles as a listHide the list
- Wed 25 FebDay 01
- Zyxel fixes critical UPnP RCE affecting a dozen router models21:41 · Security Affairs · First report
- Thu 26 FebDay 11
- Zyxel patches critical UPnP RCE flaw in 18 routers and extenders12:26 · SecurityWeek
Quiet for 16 weeks
Thu 18 JunDay 1131- Zyxel fixes CVE-2026-7273 buffer overflow in GS1900 switches02:31 · SecurityOnline · Exploited CVE · Picked up again · Known exploited CVE
Quiet for 14 weeks
Mon 21 SepDay 2081- CISA Warns of Active Zyxel Switch Attacks via Command Flaw20:01 · CISA · official · CISA alert · Picked up again · Known exploited CVE
- Tue 22 SepDay 2094
- Suspected Chinese Actor Exposed 18,566 Government Records in Campaign04:23 · SecurityOnline · Known exploited CVE
- US Authorities Warn of Zyxel Switch Flaw Exploited in Attacks04:23 · SecurityOnline · Known exploited CVE
- CISA Flags Zyxel Switch Flaw Exploited in Network Attacks10:36 · Security Affairs · Known exploited CVE
- Chinese Hackers Exploit Zyxel Switch Flaw to Steal Credentials12:22 · SecurityWeek · Known exploited CVE
Quiet for 6 weeks
Wed 4 NovDay 2522- Binarly warns of exploited Zyxel GS1900 switch zero day03:30 · SecurityOnline · Picked up again
- Zyxel's patch missed the switch flaw attackers were exploiting04:52 · cybersixt
All CVEs in coverage6
Exploited first, then by EPSS
- CVE-2026-7273Exploited
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
8.8High2.8% EPSS · 8 articles Zyxel VMG3625-T50B firmware vulnerability
4.9Medium2.1% EPSS · 1 articleZyxel VMG3625-T50B firmware vulnerability
4.9Medium1.9% EPSS · 1 articleZyxel EX3301-T0 firmware vulnerability
8.8High1.5% EPSS · 2 articlesZyxel EX3510-B0 firmware vulnerability
9.8Critical1.2% EPSS · 2 articlesZyxel VMG3625-T50B firmware vulnerability
Not scored1.0% EPSS · 2 articlesZyxel GS1900-24E firmware vulnerability
8.8High0.3% EPSS · 2 articles