> TritonInfoSec News
Home / Nov 06, 2026 / Story
0
#3 The Hacker News general November 05, 2026 at 07:06 UTC

Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution

By [email protected] (The Hacker News)

AI Summary

Zyxel's earlier firmware patch (version 2.90) for actively exploited GS1900 switches failed to fully remediate the underlying flaw, tracked as CVE-2026-107441 — an out-of-bounds write allowing unauthenticated OS command execution via crafted HTTP requests to the web management interface. Binarly researchers confirmed attackers could still exploit patched devices, prompting Zyxel to release new firmware covering 10 GS1900 switch models. Administrators who applied the initial patch must update again immediately.

Read full article → https://thehackernews.com/2026/11/zyxel-gs1900-pat…

Relevance score: 89.0/100

# More from November 06

  1. 1
    OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux The Hacker News
  2. 2
    OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run The Hacker News
  3. 4
    Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root The Hacker News
  4. 5
    SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records The Hacker News
  5. 6
    Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes SecurityWeek
  6. 7
    Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says The Hacker News
  7. 8
    French bank confirms cyber heist, hackers suspected to have stolen an estimated $133 million The Record
  8. 9
    Cyberattack disrupts blood storage refrigeration systems in France BleepingComputer
  9. 10
    Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads The Hacker News