highCVE
CISA Adds Zyxel GS1900 Stack Overflow to KEV Catalog; Active Exploitation Confirmed
Critical vulnerability allows arbitrary code execution and SYSTEM-level access on affected network switches
CyberIntel Desk1 min read
Key Takeaways
- CISA has added CVE-2026-7273 to its Known Exploited Vulnerabilities catalog due to active exploitation.
- The flaw is a stack-based buffer overflow in Zyxel GS1900 series switches.
- CVSS score of 8.8 indicates high severity with potential for arbitrary code execution and SYSTEM-level access.
- Zyxel has released patches; immediate application is urged by CISA.
Related Security News
highCVE
CISA Adds Two Citrix NetScaler Vulnerabilities to Known Exploited Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. CVE-2026-88771 involves improper input validation and CVE-2026-88772 involves improper restriction of operations within the bounds of a memory buffer, both affecting Citrix NetScaler products. The additions trigger remediation requirements under Binding Operational Directive 26-04 for Federal Civilian Executive Branch agencies.
CISA Advisories2 min read
