Zyxel patches zero-day exploited to hack nearly 1,000 network switches
Flaw in GS1900 series was initially mistaken for an older vulnerability that had already been patched
Zyxel has released security updates for a zero-day vulnerability in its GS1900 series network switches after GreyNoise reported that attackers had compromised 996 devices across 48 countries. The flaw, tracked as CVE-2026-107441, is an out-of-bounds write vulnerability in the web management interface that allows an unauthenticated attacker with network access to execute operating system commands using specially crafted HTTP requests.