Gs1900-24 Firmware vulnerabilities

2 known vulnerabilities in Gs1900-24 Firmware from Zyxel. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  GS1900-24E firmware: Out-of-bounds Write

  CVE-2026-107441Nov 3, 2026Zyxel

  An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an unauthenticated adjacent attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.

• 8.8 High severity

  Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Exploited

  CVE-2026-7273Jun 16, 2026ZyxelEPSS 2.73%

  A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.