CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow
A stack-based buffer overflow in the CGI program allows unauthenticated LAN attackers to execute OS commands via crafted HTTP requests.
- Exploited in the wild
- Since 21 Sep 2026
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-7273?
CVE-2026-7273 is a high-severity memory corruption vulnerability in Zyxel GS1900-10HP firmware, published on 16 Jun 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.
Weakness: CWE-121
Which versions are affected by CVE-2026-7273?
It affects 10 products.
Products include Zyxel Gs1900-10hp Firmware, Zyxel Gs1900-16 Firmware, Zyxel Gs1900-24 Firmware, Zyxel Gs1900-24e Firmware, Zyxel Gs1900-24ep Firmware, Zyxel Gs1900-24hpv2 Firmware and 4 more.
How do I fix CVE-2026-7273?
No fix has been published for CVE-2026-7273 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 24 Sep 2026.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-7273 being exploited?
Yes. Attackers have exploited CVE-2026-7273 in the wild since at least 21 Sep 2026.
Other vulnerabilities in Zyxel GS1900-10HP firmware
Sources
Also known as GHSA-rrv4-8jq5-8j78.