---
title: "Zyxel: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/zyxel/
description: "Every Zyxel vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (4), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-09-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Zyxel: known exploited vulnerabilities

- 2026-09-21 [CVE-2026-7273](https://erroneo.us/security/cve/CVE-2026-7273/index.md) Zyxel GS1900 Series Switches: Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability (due 2026-09-24; ransomware: Unknown)
- 2025-02-11 [CVE-2024-40891](https://erroneo.us/security/cve/CVE-2024-40891/index.md) Zyxel DSL CPE Devices: Zyxel DSL CPE OS Command Injection Vulnerability (due 2025-03-04; ransomware: Unknown)
- 2025-02-11 [CVE-2024-40890](https://erroneo.us/security/cve/CVE-2024-40890/index.md) Zyxel DSL CPE Devices: Zyxel DSL CPE OS Command Injection Vulnerability (due 2025-03-04; ransomware: Unknown)
- 2024-12-03 [CVE-2024-11667](https://erroneo.us/security/cve/CVE-2024-11667/index.md) Zyxel Multiple Firewalls: Zyxel Multiple Firewalls Path Traversal Vulnerability (due 2024-12-24; ransomware: Known)

---
Source page: https://erroneo.us/security/vendor/zyxel/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt