Zyxel heeft een kwetsbaarheid verholpen in de firmware van de Zyxel GS1900-24E netwerk switch, specifiek in versie 2.90(AAHK.2)C0 en eerder. De kwetsbaarheid betreft een out-of-bounds write in het CGI-programma van de management-interface van het apparaat. Een niet-geauthenticeerde aanvaller met toegang tot de management-interface kan via speciaal vervaardigde HTTP-verzoeken commando's uitvoeren op het systeem.
NCSC-2026-0468 [1.00] [M/H] Kwetsbaarheid verholpen in Zyxel product
About this summary. This is a short excerpt from the description that NCSC-NL published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://advisories.ncsc.nl/advisory?id=NCSC-2026-0468
Source attribution: headline and facts are from NCSC-NL (advisories.ncsc.nl). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Zyxel GS1900 Zero-Day: Patch 3 Fixes Bypassed Bug
Zyxel has released new firmware for 10 GS1900 switch models to fix CVE-2026-107441, an out-of-bounds write that lets an unauthenticated attacker run OS commands on the…
Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly…
Fake Kernel Threads Are Hiding Backdoors on Linux Servers and Appliances
Attackers keep disguising malware as Linux kernel worker processes, but careful checks will expose the disguise On September 5, 2026, Sansec, a security firm that…
NCSC-2026-0467 [1.00] [M/H] Kwetsbaarheden verholpen in Google Android en Samsung Mobile
Google heeft kwetsbaarheden verholpen in Android. Samsung heeft de voor Samsung Mobile relevante kwetsbaarheden verholpen in hun producten. De ernstige kwetsbaarheden…
Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day
Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests.
AI-Powered Ransomware Is Coming for UK Critical Infrastructure, and Europe Is Already the Testing Ground
Overview The UK's National Cyber Security Centre (NCSC) has put a date on a threat that security teams across Europe have been bracing for. In its 2026 Annual Review…