Intelligence online17 sources monitored8 actively exploited 7d26 published 24hChecked recently
Vendor

Zyxel

13 known exploited

Zyxel news

CriticalAct nowExploitedCISA KEV

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing…

Why it matters

CISA lists this as exploited in the wild. Unpatched BIG-IP and Multiple Products systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Cybersecurity Advisories · 4 sources
EnterpriseSecurity pros
HighPatchExploitedCISA KEV

Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability (CVE-2026-7273) is being actively exploited, CISA warns

CISA added CVE-2026-7273 (Zyxel GS1900 Series Switches) to its Known Exploited Vulnerabilities catalog on September 21, 2026, which means there is reliable evidence of exploitation in the wild. Zyxel GS1900 series switches contain a stack-based buffer overflow vulnerability in the CGI program which could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted…

Why it matters

CISA lists this as exploited in the wild. Unpatched GS1900 Series Switches systems are exposed to active attacks now.

Patch

Apply the vendor's security update for GS1900 Series Switches.

CISA Known Exploited VulnerabilitiesSecurity pros

Actively exploited

All 13 →
CVE-2026-7273CVSS 8.8

Zyxel GS1900 Series Switches

Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability

Added Sep 21, 2026Fed. due Sep 24, 2026Coverage →
CVE-2024-40890CVSS 8.8

Zyxel DSL CPE Devices

Zyxel DSL CPE OS Command Injection Vulnerability

Added Feb 11, 2025Fed. due Mar 4, 2025
CVE-2024-40891CVSS 8.8

Zyxel DSL CPE Devices

Zyxel DSL CPE OS Command Injection Vulnerability

Added Feb 11, 2025Fed. due Mar 4, 2025
CVE-2024-11667RansomwareCVSS 9.8

Zyxel Multiple Firewalls

Zyxel Multiple Firewalls Path Traversal Vulnerability

Added Dec 3, 2024Fed. due Dec 24, 2024
CVE-2017-6884RansomwareCVSS 8.8

Zyxel EMG2926 Routers

Zyxel EMG2926 Routers Command Injection Vulnerability

Added Sep 18, 2023Fed. due Oct 9, 2023
CVE-2017-18368CVSS 9.8

Zyxel P660HN-T1A Routers

Zyxel P660HN-T1A Routers Command Injection Vulnerability

Added Aug 7, 2023Fed. due Aug 28, 2023
CVE-2023-27992CVSS 9.8

Zyxel Multiple Network-Attached Storage (NAS) Devices

Zyxel Multiple NAS Devices Command Injection Vulnerability

Added Jun 23, 2023Fed. due Jul 14, 2023
CVE-2023-33009CVSS 9.8

Zyxel Multiple Firewalls

Zyxel Multiple Firewalls Buffer Overflow Vulnerability

Added Jun 5, 2023Fed. due Jun 26, 2023
CVE-2023-33010CVSS 9.8

Zyxel Multiple Firewalls

Zyxel Multiple Firewalls Buffer Overflow Vulnerability

Added Jun 5, 2023Fed. due Jun 26, 2023
CVE-2023-28771CVSS 9.8

Zyxel Multiple Firewalls

Zyxel Multiple Firewalls OS Command Injection Vulnerability

Added May 31, 2023Fed. due Jun 21, 2023
CVE-2022-30525CVSS 9.8

Zyxel Multiple Firewalls

Zyxel Multiple Firewalls OS Command Injection Vulnerability

Added May 16, 2022Fed. due Jun 6, 2022
CVE-2020-9054CVSS 9.8

Zyxel Multiple Network-Attached Storage (NAS) Devices

Zyxel Multiple NAS Devices OS Command Injection Vulnerability

Added Mar 25, 2022Fed. due Apr 15, 2022
CVE-2020-29583CVSS 9.8

Zyxel Multiple Products

Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability

Added Nov 3, 2021Fed. due May 3, 2022

Products

Multiple Firewalls · 5 KEVDSL CPE Devices · 2 KEVMultiple Network-Attached Storage (NAS) Devices · 2 KEVEMG2926 Routers · 1 KEVGS1900 Series Switches · 1 KEVMultiple Products · 1 KEVP660HN-T1A Routers · 1 KEV