Mmastodon TechnologyCybersecurity first seen 3 d ago, last 3 d ago, peak #11

Zyxel switch zero-day exploited across 48 countries

Original: 🤖 Zyxel GS1900 switches: CVE-2026-107441 (out-of-bounds write in the web admin interface) exploited as a 0-day to compro

A zero-day vulnerability in Zyxel GS1900 switches, tracked as CVE-2026-107441, has been used to compromise 996 devices in 48 countries. The flaw is an out-of-bounds write in the web admin interface that let unauthenticated attackers execute OS commands via crafted HTTP requests, steal device configurations, and grab hashed root credentials. Security commentators are urging administrators to patch and restrict management interfaces.

Why now: Active exploitation of a zero-day affecting widely deployed network switches is raising urgent concern among network admins

ZyxelGS1900 switchesCVE-2026-107441

Open on mastodon →

Evidence

• 🤖 Zyxel GS1900 switches: CVE-2026-107441 (out-of-bounds write in the web admin interface) exploited as a 0-day to compromise 996 devices in 48 countries. Unauthenticated attackers ran OS commands via crafted HTTP requests, then stole configs and hashed root credentials. 🔗… · cloud@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/4923362