CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation.
CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Binding Operational Directive (BOD) 26-04: Prioritizing…
Why it matters
CISA lists this as exploited in the wild. Unpatched BIG-IP and Multiple Products systems are exposed to active attacks now.
CISA added CVE-2026-7273 (Zyxel GS1900 Series Switches) to its Known Exploited Vulnerabilities catalog on September 21, 2026, which means there is reliable evidence of exploitation in the wild. Zyxel GS1900 series switches contain a stack-based buffer overflow vulnerability in the CGI program which could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted…
Why it matters
CISA lists this as exploited in the wild. Unpatched GS1900 Series Switches systems are exposed to active attacks now.
Patch
Apply the vendor's security update for GS1900 Series Switches.
