#Zyxel
All CosmicBytez Labs articles tagged #Zyxel, across news, security advisories, how-to guides, and projects.
- News
Zyxel Fixes Zero-Day Exploited to Hack Nearly 1,000 GS1900 Network Switches
Zyxel patched CVE-2026-107441, an out-of-bounds write in GS1900 switches that bypassed the June fix and was used to steal configs and credentials.
- News
Chinese Hackers Exploit WordPress, Zyxel Flaws to Steal Government Data
Chinese-speaking actor breached 996 Zyxel switches and 49 orgs via WordPress flaws, stealing 18,566 government records.
- Security
CVE-2026-7273: Zyxel GS1900 Switches Stack Buffer Overflow Now Actively Exploited
CISA added this unauthenticated LAN RCE flaw in Zyxel GS1900 switches to its KEV catalog after confirming active exploitation.
- Newsletter
Weekly Digest — Issue #36
Arista's VeloCloud takes a CVSS 10.0 under active attack, a Microsoft 'spoofing' bug turns out to be real RCE, and China loots government data.
- Security
CVE-2026-6837: Zyxel WAX650S Post-Auth Command Injection (CVSS 7.2)
A post-authentication command injection vulnerability in the Zyxel WAX650S Wi-Fi 6 access point allows authenticated administrators to execute arbitrary...