CVE-2026-7273: Zyxel GS1900 Series Switches

Zyxel GS1900 series switches contain a stack-based buffer overflow vulnerability in the CGI program which could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.

Vendor: Zyxel
Product: GS1900 Series Switches
Vulnerability: Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Date added: Sep 21, 2026
CISA due date (U.S. federal agencies): Sep 24, 2026
Known ransomware campaign use: Unknown
Weakness (CWE): CWE-121

References

NVD — CVE-2026-7273
www.zyxel.com
www.cisa.gov
www.cisa.gov
nvd.nist.gov

This site summarizes CISA's catalog for information only. It is not security advice — follow your vendor's guidance and official advisories.

Last updated: Oct 4, 2026 17:31 UTC · Catalog version 2026.10.02