{"id":3047,"date":"2026-09-22T08:51:43","date_gmt":"2026-09-22T08:51:43","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=3047"},"modified":"2026-09-22T08:51:43","modified_gmt":"2026-09-22T08:51:43","slug":"zyxel-and-veeam-flaws-under-active-exploitation-with-command-and-system-access","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=3047","title":{"rendered":"Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access"},"content":{"rendered":"
\n

\ue804<\/i>Ravie Lakshmanan<\/span>\ue802<\/i>Sep 22, 2026<\/span><\/span>Vulnerability \/ Endpoint Security<\/span><\/p>\n<\/div>\n

\n
<\/a><\/div>\n

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added<\/a> a now-patched security flaw impacting Zyxel GS1900 series switches to its Known Exploited Vulnerabilities (KEV<\/a>) catalog, citing evidence of active exploitation.<\/p>\n

The vulnerability, tracked as CVE-2026-7273 (CVSS score: 8.8), is a stack-based buffer overflow vulnerability that could result in arbitrary operating system (OS) command execution.<\/p>\n

\u00abA stack-based buffer overflow vulnerability in the CGI program of the Zyxel GS1900 series switch firmware could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request,\u00bb Zyxel said<\/a> in an advisory released in June 2026. <\/p>\n

\n
\"Cybersecurity\"<\/a><\/div>\n<\/div>\n

The issue has been addressed in the following versions –<\/p>\n

<\/p>\n