Vendors and CVEs › Vendors › Zyxel
Zyxel: industrial cyber security news and vulnerabilities
3 stories in Industrial Cyber Brief name Zyxel, 1 on CISA’s list of known exploited flaws, from Thursday 5 November 2026 to Monday 9 November 2026. Newest first; each links the full story with who is affected and what to do.
The stories
Low
Article compares Zyxel's statement with researchers' reports
A shattered.io piece sets out what Zyxel confirmed and what researchers reported. The report gives no detail on the flaw, affected products or fixes.
Critical Known exploited
Patched Zyxel GS1900 switches still open to exploit used in attacks
Binarly found that Zyxel GS1900 switches fixed for CVE-2026-7273 are still open to an exploit used in the wild. The exploit relies on a different flaw, CVE-2026-107441, which the patch did not fix.
High
Zyxel patches switch zero-day used to hack nearly 1,000 devices
Zyxel patched a zero-day flaw in its GS1900 series network switches. Hackers exploited it to compromise nearly 1,000 devices worldwide and steal configuration files and credentials.