CVE-2026-7273Vulnerability
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Reported by 6 independent sources · first reported by GreyNoise · last reported
Last reported 11 days ago
Fix due 24 Sep 2026
Used by ransomware: not knownCISA KEV catalogue
higher than 84% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
6 reports, newest first · the exact sentence from each-
September 2026 CVE Landscape“CVE-2026-7273”
-
Bulletin d'actualité CERTFR-2026-ACT-041 (28 septembre 2026)“CVE-2026-7273”
-
Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents“Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273)”
-
Zyxel security advisory (AV26-603) – Update 1“On September 21, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-7273 to their Known Exploited Vulnerabilities (KEV) Database.”
-
CISA Adds One Known Exploited Vulnerability to Catalog“CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability”
-
Open Season on Kapibala: Attacker Steals Over 18,000 Government Records Through WordPress Exploitation“…on to the above findings, GreyNoise discovered the MCA targeted ZyXEL GS1900 Smart Managed Switches globally with a novel exploit of CVE-2026-7273.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-87902, CVE-2026-93616, CVE-2026-60004, CVE-2022-0847, CVE-2026-60137, CVE-2026-63030, CVE-2023-54391, CVE-2026-65660, CVE-2026-67279, CVE-2026-34908, CVE-2026-34909, CVE-2026-34910, CVE-2026-94127, CVE-2026-5430, CVE-2026-85102, CVE-2026-93952, CVE-2026-88771, CVE-2026-56271, CVE-2026-79756, CVE-2026-54569
Thanks — we review every report.