Zyxel Patches High-Risk Vulnerability in GS1900 Switches Allowing Unauthenticated Command Execution
Zyxel disclosed CVE-2026-107441, an out-of-bounds write flaw in its GS1900 series switches with a CVSS score of 8.8, enabling attackers on the local network to execute OS commands without authentication.
Network equipment manufacturer Zyxel released a security advisory on November 3, 2026, disclosing a high-risk vulnerability tracked as CVE-2026-107441 in its GS1900 series switches. The flaw is an out-of-bounds write defect located in the CGI program within the switch firmware.
According to reports from iThome and data from Tenable and the European Union Vulnerability Database (EUVD), the vulnerability has a CVSS v3.1 severity score of 8.8, classifying it as high risk. An attacker positioned within the same Local Area Network (LAN) can trigger the vulnerability by sending specially crafted HTTP requests, allowing them to execute operating system commands without passing identity verification.
Zyxel has released new firmware versions to patch this vulnerability for 10 affected GS1900 switch models. Users are advised to check their device models and update firmware promptly to mitigate potential local network attack risks.