CVE-2026-7273

🗓️ 16 Jun 2026 02:20:29Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 109 Views

CVE-2026-7273: Stack overflow in Zyxel GS1900-48HPv2 CGI allows local area network unauthenticated attackers to run OS commands via web requests.

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	Zyxel CGI Code Execution	22 Sep 202600:00	–	bdu_fstec
Circl	CVE-2026-7273	16 Jun 202603:57	–	circl
CISA KEV Catalog	Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability	21 Sep 202600:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	21 Sep 202612:00	–	cisa
Cvelist	CVE-2026-7273	16 Jun 202602:20	–	cvelist
EUVD	EUVD-2026-37030	16 Jun 202602:20	–	euvd
KittySploit	Zyxel GS1900 CGI Stack Overflow RCE (CVE-2026-7273)	5 Oct 202614:20	–	kittysploit
KittySploit	Zyxel GS1900 CVE-2026-7273 Detect	29 Sep 202610:07	–	kittysploit
NVD	CVE-2026-7273	16 Jun 202603:16	–	nvd
Positive Technologies	PT-2026-49603	16 Jun 202600:00	–	ptsecurity

NVD

Node

AND

zyxel gs1900-8_firmwareRange<2.90(aahh.2)c0

zyxel gs1900-8Match-

Node

AND

zyxel gs1900-8hp_firmwareRange<2.90(aahi.2)c0

zyxel gs1900-8hpMatch-

Node

AND

zyxel gs1900-10hp_firmwareRange<2.90(aazi.2)c0

zyxel gs1900-10hpMatch-

Node

AND

zyxel gs1900-16_firmwareRange<2.90(aahj.2)c0

zyxel gs1900-16Match-

Node

AND

zyxel gs1900-24_firmwareRange<2.90(aahl.2)c0

zyxel gs1900-24Match-

Node

AND

zyxel gs1900-24e_firmwareRange<2.90(aahk.2)c0

zyxel gs1900-24eMatch-

Node

AND

zyxel gs1900-24ep_firmwareRange<2.90(abto.2)c0

zyxel gs1900-24epMatch-

Node

AND

zyxel gs1900-24hpv2_firmwareRange<2.90(abtp.2)c0

zyxel gs1900-24hpv2Match-

Node

AND

zyxel gs1900-48_firmwareRange<2.90(aahn.2)c0

zyxel gs1900-48Match-

Node

AND

zyxel gs1900-48hpv2_firmwareRange<2.90(abtq.2)c0

zyxel gs1900-48hpv2Match-

[
  {
    "vendor": "Zyxel",
    "product": "GS1900-48HPv2 firmware",
    "versions": [
      {
        "status": "affected",
        "version": "<= 2.90(ABTQ.1)C0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Zyxel",
    "product": "GS1900-8 firmware",
    "versions": [
      {
        "status": "affected",
        "version": "<= 2.90(AAHH.1)C0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Zyxel",
    "product": "GS1900-8HP firmware",
    "versions": [
      {
        "status": "affected",
        "version": "<= 2.90(AAHI.1)C0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Zyxel",
    "product": "GS1900-10HP firmware",
    "versions": [
      {
        "status": "affected",
        "version": "<= 2.90(AAZI.1)C0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Zyxel",
    "product": "GS1900-16 firmware",
    "versions": [
      {
        "status": "affected",
        "version": "<= 2.90(AAHJ.1)C0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Zyxel",
    "product": "GS1900-24 firmware",
    "versions": [
      {
        "status": "affected",
        "version": "<= 2.90(AAHL.1)C0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Zyxel",
    "product": "GS1900-24E firmware",
    "versions": [
      {
        "status": "affected",
        "version": "<= 2.90(AAHK.1)C0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Zyxel",
    "product": "GS1900-24EP firmware",
    "versions": [
      {
        "status": "affected",
        "version": "<= 2.90(ABTO.1)C0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Zyxel",
    "product": "GS1900-24HPv2 firmware",
    "versions": [
      {
        "status": "affected",
        "version": "<= 2.90(ABTP.1)C0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Zyxel",
    "product": "GS1900-48 firmware",
    "versions": [
      {
        "status": "affected",
        "version": "<= 2.90(AAHN.1)C0"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-stack-based-buffer-overflow-vulnerability-in-gs1900-series-switches-06-16-2026
greynoise	www.greynoise.io/blog/open-season-on-kapibala-attacker-steals-government-records-wordpress-exploitation
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

22 Sep 2026 12:10Current

8.4High risk

Vulners AI Score8.4

CVSS 3.18.8

EPSS0.02501

SSVC