{"uuid": "1775ad75-0428-40db-90ee-37876b799df0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://t.me/pphm_HackerNews/3249", "content": "\ud83d\udd34 Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a now-patched security flaw impacting Zyxel GS1900 series switches to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\n\nThe vulnerability, tracked as CVE-2026-7273 (CVSS score: 8.8), is a stack-based buffer overflow vulnerability that could result in arbitrary operating system (OS) command execution.\n\n\"A stack-based buffer overflow vulnerability in the CGI program of the Zyxel GS1900 series switch firmware could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request,\" Zyxel said in an advisory released in June 2026.", "creation_timestamp": "2026-09-22T14:22:01.000000Z"}