CVE-2026-7273

LLM-synthesized narrative grounded in this CVE's description and references.

• Zyxel/Gs1900 10hp Firmware

  cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:*

  Range: <2.90\(aazi.2\)c0
• Zyxel/Gs1900 16 Firmware

  cpe:2.3:o:zyxel:gs1900-16_firmware:*:*:*:*:*:*:*:*

  Range: <2.90\(aahj.2\)c0
• Zyxel/Gs1900 24 Firmware

  cpe:2.3:o:zyxel:gs1900-24_firmware:*:*:*:*:*:*:*:*

  Range: <2.90\(aahl.2\)c0
• Zyxel/Gs1900 24e Firmware

  cpe:2.3:o:zyxel:gs1900-24e_firmware:*:*:*:*:*:*:*:*

  Range: <2.90\(aahk.2\)c0
• Zyxel/Gs1900 24ep Firmware

  cpe:2.3:o:zyxel:gs1900-24ep_firmware:*:*:*:*:*:*:*:*

  Range: <2.90\(abto.2\)c0
• Zyxel/Gs1900 24hpv2 Firmware

  cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:*:*:*:*:*:*:*:*

  Range: <2.90\(abtp.2\)c0
• Zyxel/Gs1900 48 Firmware

  cpe:2.3:o:zyxel:gs1900-48_firmware:*:*:*:*:*:*:*:*

  Range: <2.90\(aahn.2\)c0
• Zyxel/Gs1900 48hpv2 Firmware

  cpe:2.3:o:zyxel:gs1900-48hpv2_firmware:*:*:*:*:*:*:*:*

  Range: <2.90\(abtq.2\)c0
• Zyxel/Gs1900 8 Firmware

  cpe:2.3:o:zyxel:gs1900-8_firmware:*:*:*:*:*:*:*:*

  Range: <2.90\(aahh.2\)c0
• Zyxel/Gs1900 8hp Firmware

  cpe:2.3:o:zyxel:gs1900-8hp_firmware:*:*:*:*:*:*:*:*

  Range: <2.90\(aahi.2\)c0
• Zyxel/GS1900-48HPv2llm-fuzzy

  Range: <=2.90(ABTQ.1)C0

• www.greynoise.io/blog/open-season-on-kapibala-attacker-steals-government-records-wordpress-exploitationnvdExploitThird Party Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdThird Party AdvisoryUS Government Resource
• www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-stack-based-buffer-overflow-vulnerability-in-gs1900-series-switches-06-16-2026nvdVendor Advisory

• Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents
  Help Net Security · Sep 27, 2026
• Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers
  SecurityWeek · Sep 22, 2026
• Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273)
  Help Net Security · Sep 22, 2026
• CISA Warns of Zyxel GS1900 Switches Flaw Actively Exploited in Attacks
  Cyber Security News · Sep 22, 2026
• Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access
  The Hacker News · Sep 22, 2026
• CISA Adds One Known Exploited Vulnerability to Catalog
  CISA Alerts