CybersecurityUpdated November 5

Zyxel releases Patch 3 for ten GS1900 models

June's 2.90 Patch 2 addressed CVE-2026-7273, but Binarly found an exploit that still works on GS1900 switches with that update. Zyxel's Patch 3 addresses a separate flaw, CVE-2026-107441, across ten listed models—not every GS1900. Each model has its own fixed build. The exploit can let an unauthenticated attacker with network access to a switch's management interface run commands; Zyxel describes the attacker as LAN-based. Patch 2 and Patch 3 address different vulnerabilities.

1 publisher1 report

Coverage started November 5