Description
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.
Published: 2026-06-16
Score: 8.8 High
EPSS: 2.4% Low
KEV: Yes
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 22 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Title Zyxel GS1900 Switches Buffer Overflow Enables LAN Attacker to Execute OS Commands

Tue, 22 Sep 2026 12:30:00 +0000

Type Values Removed Values Added
First Time appeared Zyxel gs1900-10hp
Zyxel gs1900-16
Zyxel gs1900-24
Zyxel gs1900-24e
Zyxel gs1900-24ep
Zyxel gs1900-24hpv2
Zyxel gs1900-48
Zyxel gs1900-48hpv2
Zyxel gs1900-8
Zyxel gs1900-8hp
CPEs cpe:2.3:h:zyxel:gs1900-10hp:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:gs1900-16:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:gs1900-24:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:gs1900-24e:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:gs1900-24ep:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:gs1900-24hpv2:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:gs1900-48:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:gs1900-48hpv2:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:gs1900-8:-:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:gs1900-8hp:-:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:gs1900-16_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:gs1900-24_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:gs1900-24e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:gs1900-24ep_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:gs1900-48_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:gs1900-48hpv2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:gs1900-8_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:zyxel:gs1900-8hp_firmware:*:*:*:*:*:*:*:*
Vendors & Products Zyxel gs1900-10hp
Zyxel gs1900-16
Zyxel gs1900-24
Zyxel gs1900-24e
Zyxel gs1900-24ep
Zyxel gs1900-24hpv2
Zyxel gs1900-48
Zyxel gs1900-48hpv2
Zyxel gs1900-8
Zyxel gs1900-8hp

Mon, 21 Sep 2026 20:45:00 +0000

Type Values Removed Values Added
Title Zyxel GS1900 Switches Buffer Overflow Enables LAN Attacker to Execute OS Commands

Mon, 21 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
References
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Mon, 21 Sep 2026 19:45:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2026-09-21T00:00:00+00:00', 'dueDate': '2026-09-24T00:00:00+00:00'}


Thu, 18 Jun 2026 04:45:00 +0000

Type Values Removed Values Added
Title Stack-Based Buffer Overflow in Zyxel GS1900 Switch Firmware

Tue, 16 Jun 2026 21:15:00 +0000

Type Values Removed Values Added
Title Stack-Based Buffer Overflow in Zyxel GS1900 Switch Firmware

Tue, 16 Jun 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 16 Jun 2026 08:45:00 +0000

Type Values Removed Values Added
First Time appeared Zyxel
Zyxel gs1900-10hp Firmware
Zyxel gs1900-16 Firmware
Zyxel gs1900-24 Firmware
Zyxel gs1900-24e Firmware
Zyxel gs1900-24ep Firmware
Zyxel gs1900-24hpv2 Firmware
Zyxel gs1900-48 Firmware
Zyxel gs1900-48hpv2 Firmware
Zyxel gs1900-8 Firmware
Zyxel gs1900-8hp Firmware
Vendors & Products Zyxel
Zyxel gs1900-10hp Firmware
Zyxel gs1900-16 Firmware
Zyxel gs1900-24 Firmware
Zyxel gs1900-24e Firmware
Zyxel gs1900-24ep Firmware
Zyxel gs1900-24hpv2 Firmware
Zyxel gs1900-48 Firmware
Zyxel gs1900-48hpv2 Firmware
Zyxel gs1900-8 Firmware
Zyxel gs1900-8hp Firmware

Tue, 16 Jun 2026 06:30:00 +0000

Type Values Removed Values Added
Description A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}


Subscriptions

Zyxel Gs1900-10hp Gs1900-10hp Firmware Gs1900-16 Gs1900-16 Firmware Gs1900-24 Gs1900-24 Firmware Gs1900-24e Gs1900-24e Firmware Gs1900-24ep Gs1900-24ep Firmware Gs1900-24hpv2 Gs1900-24hpv2 Firmware Gs1900-48 Gs1900-48 Firmware Gs1900-48hpv2 Gs1900-48hpv2 Firmware Gs1900-8 Gs1900-8 Firmware Gs1900-8hp Gs1900-8hp Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: Zyxel

Published:

Updated: 2026-09-22T03:55:39.207Z

Reserved: 2026-04-28T06:21:36.574Z

Link: CVE-2026-7273

cve-icon Vulnrichment

Updated: 2026-06-16T12:38:21.874Z

cve-icon NVD

Status : Analyzed

Published: 2026-06-16T03:16:13.557

Modified: 2026-09-22T12:10:51.067

Link: CVE-2026-7273

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-22T16:15:08Z

Weaknesses