As cited
Copy frozen at (site build).
vulnerabilities
NCSC-2026-0468 Vulnerability fixed in Zyxel product
Zyxel released a patch for an out-of-bounds write vulnerability in the GS1900-24E switch management interface affecting firmware version 2.90(AAHK.2)C0 and earlier. Unauthenticated attackers with access to the management interface can execute remote commands through crafted HTTP requests due to improper bounds checking in the CGI component. Public reports indicate the flaw has been exploited as a zero-day, though the Dutch National Cyber Security Centre (NCSC) has not independently confirmed active exploitation.
Why it matters: Network administrators operating GS1900-24E switches must patch immediately and ensure management interfaces are isolated from the internet, as unauthenticated remote code execution is available to anyone with management port access.
- Source published
- First seen by Cybersecurity Tracker