All news
Zyxel GS1900 switches: an exploit used in attacks gets past the June patch – update to .3C0
Zyxel published an advisory on November 3 for an out-of-bounds write (CVE-2026-107441) in the web management of ten GS1900 switch models; fixed firmware has been available since October 22. Binarly researchers found that an exploit used by attackers still works against switches that installed Zyxel's June fix. GreyNoise reported that around August 17, attackers took data from 996 GS1900 switches in 48 countries.