Covered by 2 outlets — first reported by BleepingComputer, Nov 4, 20:58 UTC
Zyxel fixes zero-day exploited to hack nearly 1,000 network switches
MentionsZyxel
Summary
Zyxel has patched a previously unknown flaw in its GS1900 series network switches that attackers used to compromise nearly 1,000 devices worldwide and steal configuration files and credentials. The flaw, tracked as CVE-2026-107441, is an out-of-bounds write that could let an attacker run operating system commands through crafted HTTP requests. SecurityWeek reports the switch compromises had earlier been blamed on a flaw that was already patched, but actually exploited a zero-day.
AI summary by the SecurityTabs newsroom, checked against BleepingComputer, SecurityWeek. Read the outlets below for the full story.
Continue reading
2 outlets, in the order they reported it.
BleepingComputerFirst report
Zyxel fixes zero-day exploited to hack nearly 1,000 network switches
Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials.
SecurityWeek
Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day
Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests.
Explained
The technology and terms in this story. Learn more
- ConceptZero-dayA flaw attackers exploit before the vendor has a fix: defenders have had zero days to patch.
- WeaknessMemory corruptionBugs that let a program write where it shouldn't in memory, often leading to code execution.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.
- ConceptCVE · Common Vulnerabilities and ExposuresThe public ID system for vulnerabilities, such as CVE-2026-12345, so everyone means the same bug.
Why it was possible
The weaknesses behind this story's CVEs, from each CVE Record.