Zyxel security advisory (AV26-603) – Update 1
At a glance
- Severity
- CriticalCVSS 8.8
- Used in attacks
- Yes, 1 of 1 flaw named
- Flaws named
- CVE-2026-7273
- Vendors and products
- Zyxel
- Industries
- Government
- Reported by
- 1 outlet
On June 16, 2026, Zyxel published a security advisory to address vulnerabilities in the following products:
- GS1900 series switches – multiple versions and models
Update 1
On September 21, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-7273 to their Known Exploited Vulnerabilities (KEV) Database.
The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.
Originally published by Canadian Centre for Cyber Security. © Canadian Centre for Cyber Security. Written by Canadian Centre for Cyber Security.
Vulnerabilities referenced
- CVE-2026-72738.8High
Zyxel GS1900 Series Switches
Zyxel GS1900 series switches contain a stack-based buffer overflow vulnerability in the CGI program which could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.
Used in attacksAdded to CISA's list 2026-09-21 · Exploit code published · Patch or advisory available
Full record →
Fastnexa security experts
This story involves a flaw attackers are already using. Are you exposed?
A Fastnexa penetration tester can check whether CVE-2026-7273 or anything like it can be used against your websites, apps and network.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Coverage
One outlet has carried this so far.
2026-09-21 20:12 UTC
Related stories
- Alpine Linux rebuilds GitLab after attempted RCE attack
BleepingComputer · 2026-11-01
- Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations
SecurityWeek · 2026-11-01
- CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
The Hacker News · 2026-11-01
- New Android SMS of Death exploit can remotely crash unpatched phones
BleepingComputer · 2026-10-31
- Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
The Hacker News · 2026-10-31 · exploited