Security Digest
Zyxel: known exploited vulnerabilities
4 Zyxel CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-09-21 | CVE-2026-7273 | Zyxel GS1900 Series Switches Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | 2026-09-24 |
| 2025-02-11 | CVE-2024-40891 | Zyxel DSL CPE Devices Zyxel DSL CPE OS Command Injection Vulnerability | 2025-03-04 |
| 2025-02-11 | CVE-2024-40890 | Zyxel DSL CPE Devices Zyxel DSL CPE OS Command Injection Vulnerability | 2025-03-04 |
| 2024-12-03 | CVE-2024-11667 | Zyxel Multiple Firewalls Zyxel Multiple Firewalls Path Traversal Vulnerability Ransomware | 2024-12-24 |