CVE-2026-107441

No VulnCrest analysis published for this CVE yet. Below is the original CNA/NVD description, unmodified.

Description

An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an unauthenticated adjacent attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.

Exploits & detection

No public PoC or detection template found yet.

In the news

• Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-DaySecurityWeek · 05 Nov 2026

Timeline

• Published: 03 Nov 2026
• Last modified upstream: 05 Nov 2026

Sources & licenses

CVE / CVSS / CWE

NVD record ↗ (unmodified). This product uses the NVD API but is not endorsed or certified by the NVD. CVE® © The MITRE Corporation.

Exploitation

CISA KEV (CC0) · EPSS by FIRST.org

References used for the analysis

• https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-out-of-bounds-write-vulnerability-in-gs1900-series-switches-11-03-2026

Analysis, summary and remediation

© VulnCrest

View JSON