Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441)

As cited

Copy frozen at 2026-11-05 14:37 UTC (site build).

vulnerabilities

Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441)

Zyxel GS1900 series network switches received a patch for CVE-2026-7273 in June 2026, but the in-the-wild exploit actually targets a different vulnerability, CVE-2026-107441, leaving patched devices still exposed. Binarly identified that the two flaws are distinct, meaning organizations that applied the published fix remain vulnerable to active attacks.

Why it matters: Network administrators running GS1900 switches must verify whether the in-the-wild exploit targets CVE-2026-107441 and apply a patch for that vulnerability, as the existing security update does not remediate the actively exploited flaw.

Source published

2026-11-05 12:06 UTC

First seen by Cybersecurity Tracker

2026-11-05 14:00 UTC