CVE-2026-7273

CVSS 8.8 HIGHEPSS 0.3%CWE-121

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.8EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Lifecycle

16 Jun 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Zyxel · GS1900-10HP firmware Zyxel · GS1900-16 firmware Zyxel · GS1900-24E firmware Zyxel · GS1900-24EP firmware Zyxel · GS1900-24 firmware Zyxel · GS1900-24HPv2 firmware Zyxel · GS1900-48 firmware Zyxel · GS1900-48HPv2 firmware Zyxel · GS1900-8 firmware Zyxel · GS1900-8HP firmware

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-stack-based-buffer-overflow-vulnerability-in-gs1900-series-switches-06-16-2026