Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found. The exploit lets anyone who can reach a switch's web management interface run commands on it without logging in. Zyxel has released new firmware for 10 GS1900 models that... Weiterlesen: Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Comm…
Intelligence View
⚡ tsecurity.de Intelligence
Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 86%
Öffentlich erreichbare Dienste mit OpenVAS scannen, WAF-Regeln schärfen, Patch-Fenster verkürzen.
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
12 Quellen
it-sa 2026: Sind KI-Tools eher Fluch oder Segen?
11 weitere Quellen
GGBHackers Securityvor 3 Std.11 Digital Forensics Tools: The 2026 Buyer’s Verdict Guide GGBHackers Securityvor 2 Std.11 Cyber Risk Quantification Tools: The 2026 Buyer’s Verdict Guide GGBHackers Securityvor 2 Std.10 Third-Party / Vendor Risk Management (TPRM) Tools: The 2026 Buyer’s Verdict Guide VVulDB Updatesvor 3 Std.CVE-2026-119672 | MongoDB Database Tools up to 100.20.0 mongofiles privileges management (WID-SEC-2026-4328) VVulDB Updatesvor 3 Std.CVE-2026-119673 | MongoDB Database Tools up to 100.20.0 mongofiles symlink (WID-SEC-2026-4328) VVulDB Updatesvor 3 Std.CVE-2026-119674 | MongoDB Database Tools up to 100.20.0 mongorestore improper authorization (WID-SEC-2026-4328)
+5
7 Quellen
CVE-2026-119179 | MongoDB Node.js Driver up to 6.21.x/7.7.x Connection Management information disclosure (WID-SEC-2026-4328)
6 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-120678 | MongoDB C Driver up to 1.30.14/2.5.7 memory leak (WID-SEC-2026-4328) VVulDB Updatesvor 2 Std.CVE-2026-120673 | MongoDB Rust Driver up to 3.9.0 Diagnostic Tracing information disclosure (WID-SEC-2026-4328) VVulDB Updatesvor 2 Std.CVE-2026-120684 | MongoDB C Driver up to 1.30.14/2.5.7 GridFS uninitialized pointer (Nessus ID 376173 / WID-SEC-2026-4328) VVulDB Updatesvor 2 Std.CVE-2026-120952 | MongoDB Atlas SQL ODBC Driver up to 3.0.0 out-of-bounds write (WID-SEC-2026-4328) VVulDB Updatesvor 2 Std.CVE-2026-120953 | MongoDB Atlas SQL JDBC Driver up to 4.0.0 Authentication redirect (WID-SEC-2026-4328) VVulDB Updatesvor 2 Std.CVE-2026-120954 | MongoDB C Driver up to 2.5.7 BSON Vector integer overflow (WID-SEC-2026-4328)
6 Quellen
Airline Data Breach Widens as Singapore Airlines Reports 46,000 Affected Records
5 weitere Quellen
GGBHackers Securityvor 1 Std.DigiCert Confirms Data Breach After Security Misconfiguration Exposes Customer Personal Information CCyber Security Newsvor 1 Std.DigiCert Confirms Data Breach Exposing Customer Personal Information, Including IDs and Passports GGBHackers Securityvor 3 Std.DreamHost Confirms Data Breach After Hackers Steal FTP/SFTP Credentials and Access Customer Emails GGBHackers Securityvor 3 Std.DreamHost Confirms Data Breach After Hackers Steal FTP/SFTP Credentials and Access Customer Emails IIT Security Newsvor 3 Std.DigiCert Confirms Data Breach Exposing Customer Details and Sensitive Identity Documents
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4321185/sicherheitsluecken-cve/zyxel-gs1900-patch-fails-to-block-zero-day-exploit-allowing-root-command-execution/