CYBERSECURITYTRACKER
Permanent story citation

Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12430

As cited

Copy frozen at (site build).

vulnerabilities

Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution

Zyxel GS1900 network switches patched with firmware version 2.90 remain vulnerable to an actively exploited zero-day flaw that allows unauthenticated remote command execution through the web management interface, according to Binarly researchers. The vendor has released updated firmware addressing the issue across 10 GS1900 models.

Why it matters: Organizations operating GS1900 switches with the 2.90 firmware patch require immediate deployment of the new update to prevent attackers from gaining root access without authentication.

VendorsZyxel
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary