Search/CVE-2026-7273
● CVE — High

CVE-2026-7273

VendorzyxelProductgs1900-10hp firmware, gs1900-16 firmware, gs1900-24 firmware, gs1900-24e firmware, gs1900-48 firmware, gs1900-8 firmware, gs1900-8hp firmware, gs1900-24ep firmware, gs1900-24hpv2 firmware, gs1900-48hpv2 firmwareDiscoveredJun 16, 2026UpdatedSep 22, 2026

A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.

View graph Watch Export
CVSS v3.1
8.8 HIGH
EPSS
2.50%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
6
sources referencing this CVE
Related IOCs
1
seen in the same coverage
EPSS Trend
Sep 23, 2026 → Sep 27, 2026
▲ 0.51pp
1.99% → 2.50% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorADJACENT
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
19 relationships
Timeline
disclosure → media coverage
Jun 16, 2026
Disclosure — published as a CVE record. · last revised by NVD Sep 22, 2026
Sep 22, 2026
thehackernews.com reports: Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access
Sep 22, 2026
bleepingcomputer.com reports: CISA orders feds to patch Zyxel flaw exploited for data theft
Sep 22, 2026
helpnetsecurity.com reports: Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273)
Sep 22, 2026
securityweek.com reports: Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers
Sep 22, 2026
bleepingcomputer.com reports: Chinese hackers exploit WordPress, Zyxel flaws to steal govt data
Sep 27, 2026
helpnetsecurity.com reports: Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents