Zyxel security advisory (AV26-603) – Update 1

Used in attacksCriticalCVSS 8.8Canadian Centre for Cyber Security · Canadian Centre for Cyber Security·

At a glance

Severity
CriticalCVSS 8.8
Used in attacks
Yes, 1 of 1 flaw named
Flaws named
CVE-2026-7273
Vendors and products
Zyxel
Industries
Government
Reported by
1 outlet

On June 16, 2026, Zyxel published a security advisory to address vulnerabilities in the following products:

  • GS1900 series switches – multiple versions and models

Update 1

On September 21, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-7273 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

Originally published by Canadian Centre for Cyber Security. © Canadian Centre for Cyber Security. Written by Canadian Centre for Cyber Security.

Vulnerabilities referenced

  • Zyxel GS1900 Series Switches

    Zyxel GS1900 series switches contain a stack-based buffer overflow vulnerability in the CGI program which could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.

    Used in attacks

    Added to CISA's list 2026-09-21 · Exploit code published · Patch or advisory available

    Full record →

Fastnexa security experts

This story involves a flaw attackers are already using. Are you exposed?

A Fastnexa penetration tester can check whether CVE-2026-7273 or anything like it can be used against your websites, apps and network.

Book a 30-min callWhatsApp us

Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →

Coverage

One outlet has carried this so far.

  1. Canadian Centre for Cyber Security ↗Official SourceFirst reported

    2026-09-21 20:12 UTC

Related stories