{"vulnerability": "CVE-2026-7273", "sightings": [{"uuid": "fc350d7b-c98b-43b1-952d-fc17321f10e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116757774658704043", "content": "We have just added an important vulnerability affecting Zyxel GS1900-48HPv2 and other products (CVE-2026-7273) https://vuldb.com/vuln/370995", "creation_timestamp": "2026-06-16T03:57:35.403163Z"}, {"uuid": "5c8ff53c-71a6-4080-b2c6-52c9ff1aa68f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moew44qmwy2n", "content": "CVE-2026-7273 - Zyxel GS1900-48HPv2 Stack-Based Buffer Overflow Remote Code Execution\nCVE ID : CVE-2026-7273\n \n Published : June 16, 2026, 3:16 a.m. | 15\u00a0minutes ago\n \n Description : A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware...", "creation_timestamp": "2026-06-16T04:02:49.906125Z"}, {"uuid": "500f27f8-5325-428a-bb47-0b9db64618f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moezclcusc2r", "content": "\ud83d\udfe0 CVE-2026-7273 - High (8.8)\n\nA stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware ve...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7273/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T05:00:09.000124Z"}, {"uuid": "e8390534-2e54-48fd-a4ed-410e69d0da70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72730", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msqok25sua24", "content": "\ud83d\udfe0 CVE-2026-72730 - High (8.7)\n\nDiscourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72730/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T18:00:11.063761Z"}, {"uuid": "5f64270d-ea2a-4d2a-9e1a-ea9bdc0363e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72733", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqoum7e5t27", "content": "CVE-2026-72733 - dokploy\nDokploy's database restore feature allows authenticated users with permission to execute arbitrary commands on the server. This could lead to unauthorized access or data loss. Update to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T18:06:05.177779Z"}, {"uuid": "885c159b-9bd2-490f-b1ec-b0e5da46a8c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72735", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqouneqyd2v", "content": "CVE-2026-72735 - dokploy\nDokploy's remote server management feature allows unauthorized commands to be executed on remote servers with the configured SSH user's privileges. This is due to an incomplete fix for a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T18:06:06.277755Z"}, {"uuid": "37578aea-08f8-47b3-ba8d-b94ebb2f79c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72737", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqoy7siru26", "content": "CVE-2026-72737 - dokploy\nDokploy's backup feature in versions 0.29.8 and earlier allows an authenticated user with backup permissions to access another organization's AWS credentials, read their backups, or redirect\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T18:08:05.887999Z"}, {"uuid": "da204aca-41b9-45da-9a8a-ddacb3fe16ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72736", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqoy6kzx22b", "content": "CVE-2026-72736 - dokploy\nDokploy, a self-hosted Platform as a Service, had a security issue where an attacker could potentially run malicious code on the host server. This was fixed in version 0.29.13, so update to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T18:08:04.633332Z"}, {"uuid": "5dc36220-17fd-4e90-a698-80a381b24272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72738", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqp3rabm32o", "content": "CVE-2026-72738 - dokploy\nAn authenticated user with backup access can execute arbitrary commands on the Dokploy server. This can lead to data loss or system compromise. Update to version 0.29.13 or later to fix this\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T18:10:04.796493Z"}, {"uuid": "ece0a59a-18ea-4426-8561-83bf37a9bcbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mquzgat7c22s", "content": "Zyxel\u300cGS1900\u300d\u30b7\u30ea\u30fc\u30ba\u306b\u8106\u5f31\u6027 - LAN\u7d4c\u7531\u3067OS\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u306e\u304a\u305d\u308c\n\nZyxel\u88fd\u30b9\u30a4\u30c3\u30c1\u300cGS1900\u300d\u30b7\u30ea\u30fc\u30ba\u306b\u304a\u3044\u3066\u3001LAN\u7d4c\u7531\u3067\u60aa\u7528\u53ef\u80fd\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u4fee\u6b63\u30d1\u30c3\u30c1\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\nZyxel\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670816\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u30b9\u30bf\u30c3\u30af\u30d9\u30fc\u30b9\u306e\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u300cCVE-2026-7273\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u30d5\u30a1\u30fc\u30e0\u30a6\u30a7\u30a2\u306eCGI\u30d7\u30ed\u30b0\u30e9\u30e0\u306b\u5224\u660e\u3057\u305f\u8106\u5f31\u6027\u3067\u3001\u96a3\u63a5\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u304b\u3089\u7d30\u5de5\u3057\u305fHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u9001\u4fe1\u3059\u308b\u3053\u3068\u3067\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304fOS\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308b\u3002", "creation_timestamp": "2026-07-18T00:35:11.571158Z"}, {"uuid": "52f27b8f-3da3-4b61-8762-7951dd09bae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mw2heirxmy2w", "content": "\ud83d\uded1 CVE-2026-7273\nZyxel GS1900 Series Switches\nCVSS 8.8 / EPSS 0% / KEV: No\nTL;DR: A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-4\u2026\nhttps://cvesentinel.com/report/CVE-2026-7273?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-21T19:34:00.701527Z"}, {"uuid": "ee746d8e-9e86-40aa-b9a2-1f0147cd3936", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ee44e786-843d-4fbb-8f62-7a9b25eef54e", "content": "", "creation_timestamp": "2026-09-21T20:00:02.341059Z"}, {"uuid": "9248cbe0-2e6b-4f5d-bcf2-d057f9ef8e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mw2l6rcbul2d", "content": "(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2026-7273 \u2013 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow\u00a0Vulnerability\n\nAnalyze the technical mechanics of CVE-2026-7273 with our Zyxel TSUITE brief, covering stack-based buffer overflows, CGI command\u2026\n\nhttps://thecybermind.co/tcs0", "creation_timestamp": "2026-09-21T20:42:23.977372Z"}, {"uuid": "1c4c1827-26c3-4133-bd15-5274b9feab2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mw2m6vw5tp2w", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0921)\n\n\u26a0\ufe0f CVE-2026-7273 - Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-09-21T21:00:21.666315Z"}, {"uuid": "8124eee5-cd53-41e3-b05e-896f3ad243b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mw2shtynix2i", "content": "CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Ba...\n\n\ud83d\udd17 https://www.cisa.gov/news-events/alerts/2026/09/21/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-21T22:52:44.154912Z"}, {"uuid": "0a8ce7d2-e08e-4184-be1f-96203e221d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mw2u2jfzsu2r", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-7273: Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-7273", "creation_timestamp": "2026-09-21T23:21:04.727217Z"}, {"uuid": "d9f43ce3-fd71-4e43-9246-a7f24675e3aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mw2uryolxk2v", "content": "(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-7273 \u2013 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow\u00a0Vulnerability\n\nAnalyze the executive impact of CVE-2026-7273 with our strategic Zyxel CSUITE brief, covering zero-trust network segmentation, asset risk\u2026\n\nhttps://thecybermind.co/18gk", "creation_timestamp": "2026-09-21T23:34:12.741638Z"}, {"uuid": "5b335ea5-eec2-4971-a4ee-420d08e617a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://gist.github.com/ichintu/85fb1e02960a0516578c312a9bf4f913", "content": "This September 21, 2026 threat intelligence digest highlights four critical vulnerabilities requiring immediate patching: **Joplin Server** (CVE-2026-46649) and **Warpgate** (CVE-2026-58491) contain unmitigated SSO flaws enabling credential brute-forcing and reflected XSS/open redirects, respectively; **Roundcube Webmail** (CVE-2026-48842) is actively exploited in the wild; and **Zyxel GS1900 switches** (CVE-2026-7273) feature a stack-based buffer overflow now listed in CISA\u2019s KEV database. Additionally, community reports suggest a potential compromise of the OWASP API Security page, while a weekly cyber warfare brief tracks state-aligned operations and references CVE-2026-76460/76461. Administrators are urged to prioritize updates to Joplin \u22653.7.2, Warpgate \u22650.25.5, Roundcube \u22651.6.16/1.7.1, and affected Zyxel firmware, while verifying third-party resource integrity.", "creation_timestamp": "2026-09-22T00:03:04.983151Z"}, {"uuid": "7583fdec-e2c6-41e9-a7b1-d3f80655b7bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/zyxel-security-advisory-av26-603", "content": "", "creation_timestamp": "2026-09-22T00:15:03.006710Z"}, {"uuid": "9c6fb985-7530-4cd1-ba94-4b7a2c6a969c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44527", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\u00a0\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\u00a0\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/09/21/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-22T02:00:04.717251Z"}, {"uuid": "7ca75169-8b3d-4f5e-8d66-afc345864db2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw3dwmazxt2p", "content": "~Cisa~\nCISA confirms active exploitation of a Zyxel GS1900 switch buffer overflow; prioritize remediation.\n-\nIOCs: CVE-2026-7273\n-\n#CVE20267273 #KEV #ThreatIntel", "creation_timestamp": "2026-09-22T04:05:14.433931Z"}, {"uuid": "736cab36-d15d-4af7-a544-5d70689c2dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mw3m2lddbu2l", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-7273: \u26a0\ufe0f CVE-2026-7273: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.3%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-7273-a-stack-based-buffer-overflow-vulnerability-in", "creation_timestamp": "2026-09-22T06:30:36.239566Z"}, {"uuid": "0c0e9b52-3d51-4bf6-a7d4-d23d92ececcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mw3negsufs2y", "content": "CISA added a patched Zyxel GS1900 stack-based buffer overflow (CVE-2026-7273) to KEV due to evidence of active exploitation.\n", "creation_timestamp": "2026-09-22T06:54:01.935799Z"}, {"uuid": "136d751a-4ef3-4eef-abc9-7c92ceed0efd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mw3ng7rbe422", "content": "CISA added a patched Zyxel GS1900 stack-based buffer overflow (CVE-2026-7273) to KEV due to evidence of active exploitation.\n", "creation_timestamp": "2026-09-22T06:55:01.264327Z"}, {"uuid": "1cc93d48-6b41-4ef9-b5b4-9c47afd503ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mw3r4sy6q62p", "content": "CISA plaatst kritieke Zyxel-kwetsbaarheid op lijst van veelgebruikte hacks\n\nDe Amerikaanse Cybersecurity and Infrastructure Security Agency (CISA) heeft op 21 september 2026 de kwetsbaarheid CVE-2026-7273 toegevoegd aan de Known Exploited Vulnerabilities (KEV)-catalogus. Deze classific...", "creation_timestamp": "2026-09-22T08:01:20.058489Z"}, {"uuid": "7d9cd3ba-86a0-431e-bdf7-1a4450a0c06d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-2a3fda23-62cf6f8affbcfc73", "content": "U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Zyxel flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Zyxel GS1900 Series Switches flaw, tracked as CVE-2026-7273 (CVSS score of 8.8), to its Known Exploited Vulnerabilities (KEV) catalog. The flaw is a stack-based buffer overflow that could allow attackers [\u2026]U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog", "creation_timestamp": "2026-09-22T09:56:56.362253Z"}, {"uuid": "2e8a6ca9-cb5c-46ab-88b2-74c2a633f373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mw3xlywrutg2", "content": "U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Zyxel flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Zyxel GS1900 Series Switches flaw, tracked as CVE-2026-7273 (CVSS score of 8.8), to its Known [\u2026]", "creation_timestamp": "2026-09-22T09:57:13.867450Z"}, {"uuid": "1149b7d0-5a35-43e6-8be2-2691771b2ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://thehackernews.com/2026/09/zyxel-and-veeam-flaws-under-active.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched security flaw impacting Zyxel GS1900 series switches to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\n\nThe vulnerability, tracked as CVE-2026-7273 (CVSS score: 8.8), is a stack-based buffer overflow vulnerability that could result in arbitrary operating", "creation_timestamp": "2026-09-22T10:00:44.422652Z"}, {"uuid": "dc8cdce5-f738-4e3d-b91c-eacd4bfe84a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mw3yumkq6a2b", "content": "CVE-2026-7273 in Zyxel GS1900 switches is being exploited\u2014patch now or beware unauthorized control. #NetworkSecurity #Vulnerability #CVE2026 #Zyxel #CyberThreats #ZeroDay https://thedailytechfeed.com/cisa-alerts-critical-vulnerability-in-zyxel-gs1900-switches-under-active-attack/", "creation_timestamp": "2026-09-22T10:19:55.160167Z"}, {"uuid": "b2bbfea7-c0cf-4f57-bc30-216213b55d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mw42p56duk2u", "content": "Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/09/22/z...\n\n#cybersecurity #cybersecuritynews #exploit #government #SMBs @greynoise.io @greynoise.infosec.exchange.ap.brid.gy @veeam.com", "creation_timestamp": "2026-09-22T10:52:40.915857Z"}, {"uuid": "d5b83918-8edd-44ff-97ea-26f27d1c4da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3mw42sfdh7b2u", "content": "Zyxel GS1900 Switches Targeted in Active Attacks, CISA\u00a0Warns\n\nAttackers are actively exploiting CVE-2026-7273 in Zyxel GS1900 switches, with CISA urging organizations to patch affected devices.", "creation_timestamp": "2026-09-22T10:54:27.815435Z"}, {"uuid": "e7de80ce-057f-4712-9396-3d6af5830c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mw436vkvva2s", "content": "\u653b\u6483\u8005\u30018\u6708\u4ee5\u964d\u307b\u307c1000\u53f0\u306eZyxel\u30b9\u30a4\u30c3\u30c1\u3092\u4fb5\u5bb3\uff08CVE-2026-7273\uff09\n\n\u4e2d\u56fd\u8a9e\u570f\u306e\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u304c\u3001\u672a\u30d1\u30c3\u30c1\u306eZyXEL GS1900 Smart Managed Switches\u306b\u5b58\u5728\u3059\u308b\u8106\u5f31\u6027(CVE-2026-7273)\u3092\u60aa\u7528\u3057\u300148\u30ab\u56fd996\u53f0\u306e\u30c7\u30d0\u30a4\u30b9\u304b\u3089\u6a5f\u5bc6\u30c7\u30fc\u30bf\u3092\u7a83\u53d6\u3057\u3066\u3044\u305f\u3053\u3068\u304c\u3001GreyNoise\u304c\u6708\u66dc\u65e5\u306b\u767a\u8868\u3057\u305f\u5831\u544a\u3067\u660e\u3089\u304b\u306b\u306a\u308a\u307e\u3057\u305f\u3002 \u5f71\u97ff\u3092\u53d7\u3051\u305f\u30b9", "creation_timestamp": "2026-09-22T11:01:26.946505Z"}, {"uuid": "1fecf57f-e4c2-44b6-a8b2-949cf5b528ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mw43xrniw724", "content": "CISA says CVE-2026-7273 in Zyxel GS1900 switches is actively exploited for data theft. The stack overflow lets unauthenticated LAN users run OS commands. #Zyxel #CISA #US", "creation_timestamp": "2026-09-22T11:15:21.748449Z"}, {"uuid": "d23d2197-ca1e-446d-afd7-ac8bfa339411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117314533473813004", "content": "The vulnerability, tracked as CVE-2026-7273 (CVSS score: 8.8), is a stack-based buffer overflow vulnerability that could result in arbitrary operating system (OS) command execution. https://thehackernews.com/2026/09/zyxel-and-veeam-flaws-under-active.html", "creation_timestamp": "2026-09-22T11:48:40.786078Z"}, {"uuid": "949b106f-0f06-4a11-a13b-8d662cc2c91f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mw45tpabss2v", "content": "The vulnerability, tracked as CVE-2026-7273 (CVSS score: 8.8), is a stack-based buffer overflow vulnerability that could result in arbitrary operating system (OS) command execution. thehackernews.com/2026/09/zyxe...", "creation_timestamp": "2026-09-22T11:48:53.720054Z"}, {"uuid": "d834c6ba-5dad-4cba-8f3e-9975cc340932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mw46am6zv223", "content": "Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273)\n\nwww.helpnetsecurity.com/2026/09/22/z...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-09-22T11:56:07.573194Z"}, {"uuid": "0bac5060-0931-40cd-893d-707a213f316f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mw4cwmh5ul25", "content": "CISA added a patched vulnerability in Zyxel GS1900 series switches (CVE-2026-7273, CVSS 8.8) to its KEV catalog, indicating active exploitation. This stack-based buffer overflow allows unauthenticated LAN attackers to execute OS commands via crafted HTTP requests.", "creation_timestamp": "2026-09-22T13:20:00.100308Z"}, {"uuid": "18d386fd-590b-4572-80af-e4d6d9d16880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7273", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mw4ddnjc6p2r", "content": "\ud83d\udcf0 CISA Perintahkan Pemerintah AS Patch Celah Zyxel GS1900 yang Aktif Dieksploitasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/22/cisa-zyxel-gs1900-cve-2026-7273-dieksploitasi/\n\n#activeExploitation #cisa #cve-2026-7273 #cybersecurity #dataExfiltration #dataTheft #exploit #fi", "creation_timestamp": "2026-09-22T13:27:17.168946Z"}, {"uuid": "3d20ebdc-1c1d-45dd-b501-df8bf546d57d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4d622737-cf24-43c3-a122-d3be1a7b99ad", "content": "", "creation_timestamp": "2026-09-22T14:00:41.608186Z"}, {"uuid": "2b674b81-a847-4c1d-b444-6632cbdf9a38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7273", "type": "seen", "source": "https://bsky.app/profile/ikehjames25.bsky.social/post/3mw4lfzb35m2n", "content": "Chinese Hackers Exploit ZyXEL Switch Vulnerability to Exfiltrate\u00a0Data\n\nThreat actors exploited CVE-2026-7273 in ZyXEL GS1900 switches to steal credentials and configuration data from devices across 48 countries.", "creation_timestamp": "2026-09-22T15:51:46.347414Z"}]}