{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:35.986Z","products":["zyxel"],"actNowTotal":1,"results":[{"query":"zyxel","matched":2,"actNow":1,"events":[{"id":"kev-2026-09-21-zyxel-gs1900-series-switches","url":"https://securitythreatpulse.com/events/kev-2026-09-21-zyxel-gs1900-series-switches","title":"Zyxel GS1900 Series Switches: a memory flaw attackers can abuse","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 148 days old, so many systems are likely still unpatched.","tier":"now","rankScore":4,"rankWhy":["Exploitation is confirmed by an authoritative source.","11 products are affected."],"rulesVersion":"v3","ladder":{"talk":"confirmed","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-7273"],"vendor":"Zyxel","product":"GS1900 Series Switches","affectedProducts":[{"kind":"direct","slug":"zyxel/gs1900seriesswitches","vendor":"Zyxel","product":"GS1900 Series Switches","evidence":["kev"],"vendorKey":"zyxel","productKey":"gs1900seriesswitches"},{"kind":"direct","slug":"zyxel/gs190048hpv2firmware","vendor":"Zyxel","product":"Gs1900-48hpv2 Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs190048hpv2firmware"},{"kind":"direct","slug":"zyxel/gs19008firmware","vendor":"Zyxel","product":"Gs1900-8 Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs19008firmware"},{"kind":"direct","slug":"zyxel/gs19008hpfirmware","vendor":"Zyxel","product":"Gs1900-8hp Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs19008hpfirmware"},{"kind":"direct","slug":"zyxel/gs190010hpfirmware","vendor":"Zyxel","product":"Gs1900-10hp Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs190010hpfirmware"},{"kind":"direct","slug":"zyxel/gs190016firmware","vendor":"Zyxel","product":"Gs1900-16 Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs190016firmware"},{"kind":"direct","slug":"zyxel/gs190024firmware","vendor":"Zyxel","product":"Gs1900-24 Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs190024firmware"},{"kind":"direct","slug":"zyxel/gs190024efirmware","vendor":"Zyxel","product":"Gs1900-24e Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs190024efirmware"},{"kind":"direct","slug":"zyxel/gs190024epfirmware","vendor":"Zyxel","product":"Gs1900-24ep Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs190024epfirmware"},{"kind":"direct","slug":"zyxel/gs190024hpv2firmware","vendor":"Zyxel","product":"Gs1900-24hpv2 Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs190024hpv2firmware"},{"kind":"direct","slug":"zyxel/gs190048firmware","vendor":"Zyxel","product":"Gs1900-48 Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs190048firmware"}],"category":{"id":"network-device","label":"Routers, cameras and devices","why":"Routers, cameras and recorders are often forgotten and rarely updated.","doThis":"Update it or replace it. Never leave its admin page open to the internet."},"summary":"Zyxel GS1900 series switches contain a stack-based buffer overflow vulnerability in the CGI program which could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.","cvss":8.8,"epss":0.02734,"exploitMaturity":"none","kevListed":true,"kevDateAdded":"2026-09-21","kevDueDate":"2026-09-24","firstSeenAt":"2026-09-21T00:00:00.000Z","updatedAt":"2026-11-11T02:30:23.338Z","newestEvidenceAt":"2026-11-09T09:00:07.891Z"},{"id":"early-cve-2026-107441","url":"https://securitythreatpulse.com/events/early-cve-2026-107441","title":"Zyxel GS1900-24E firmware: a memory flaw attackers can abuse","verdict":"watch","verdictReason":"One source reports attacks and the vulnerability is 8 days old. In our backtest a single early report was confirmed within 30 days about one time in twenty, so we wait for a second report or for attack attempts to be seen.","tier":null,"rankScore":4,"rankWhy":["Exploitation is reported.","The first report is 3 days old.","10 products are affected."],"rulesVersion":"v3","ladder":{"talk":"confirmed","damage":"none","attempts":"reported","exposure":"none","exploited":"reported"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-107441"],"vendor":"Zyxel","product":"GS1900-24E firmware","affectedProducts":[{"kind":"direct","slug":"zyxel/gs190024efirmware","vendor":"Zyxel","product":"GS1900-24E firmware","evidence":["cna","cpe"],"vendorKey":"zyxel","productKey":"gs190024efirmware"},{"kind":"direct","slug":"zyxel/gs19008firmware","vendor":"Zyxel","product":"Gs1900-8 Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs19008firmware"},{"kind":"direct","slug":"zyxel/gs19008hpfirmware","vendor":"Zyxel","product":"Gs1900-8hp Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs19008hpfirmware"},{"kind":"direct","slug":"zyxel/gs190010hpfirmware","vendor":"Zyxel","product":"Gs1900-10hp Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs190010hpfirmware"},{"kind":"direct","slug":"zyxel/gs190016firmware","vendor":"Zyxel","product":"Gs1900-16 Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs190016firmware"},{"kind":"direct","slug":"zyxel/gs190024firmware","vendor":"Zyxel","product":"Gs1900-24 Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs190024firmware"},{"kind":"direct","slug":"zyxel/gs190024epfirmware","vendor":"Zyxel","product":"Gs1900-24ep Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs190024epfirmware"},{"kind":"direct","slug":"zyxel/gs1900hpv2firmware","vendor":"Zyxel","product":"Gs1900-hpv2 Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs1900hpv2firmware"},{"kind":"direct","slug":"zyxel/gs190048firmware","vendor":"Zyxel","product":"Gs1900-48 Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs190048firmware"},{"kind":"direct","slug":"zyxel/gs190048hpv2firmware","vendor":"Zyxel","product":"Gs1900-48hpv2 Firmware","evidence":["cpe"],"vendorKey":"zyxel","productKey":"gs190048hpv2firmware"}],"category":{"id":"network-device","label":"Routers, cameras and devices","why":"Routers, cameras and recorders are often forgotten and rarely updated.","doThis":"Update it or replace it. Never leave its admin page open to the internet."},"summary":"An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an unauthenticated adjacent attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.","cvss":8.8,"epss":0.00293,"exploitMaturity":"none","kevListed":false,"kevDateAdded":null,"kevDueDate":null,"firstSeenAt":"2026-11-08T18:27:10.000Z","updatedAt":"2026-11-11T02:00:06.171Z","newestEvidenceAt":"2026-11-09T09:00:07.855Z"}]}]}