CVE-2026-107441highobserved exploitationCWE-787

CVE-2026-107441: high-severity vulnerability in Zyxel GS1900-24E firmware

Published · Updated

Follow this CVE+ Monitor GS1900-48+ Monitor GS1900-8

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.

ssvc Actcvss 8.8epss 0.3%
from disclosure to weapon2 days
Published on NVDNov 3
1st PoC+2d
VulnCheckNov 3
An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an unauthenticated adjacent attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Zyxel · GS1900-10HP firmwareZyxel · GS1900-16 firmwareZyxel · GS1900-24E firmwareZyxel · GS1900-24EP firmwareZyxel · GS1900-24 firmwareZyxel · GS1900-48 firmwareZyxel · GS1900-48HPv2 firmwareZyxel · GS1900-8 firmwareZyxel · GS1900-8HP firmwareZyxel · GS1900-HPv2 firmware
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Zyxel GS1900-24E firmware

In the same product, most dangerous first.

CVE-2026-7273HIGHCVE-2026-7273EPSS 2.7%KEVCVE-2024-38270MEDIUMCVE-2024-38270EPSS 0.2%