Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found. The exploit lets anyone who can reach a switch's web management interface run commands on it without logging in. Zyxel has released new firmware for 10 GS1900 models that... Weiterlesen: Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Comm…
Intelligence View
⚡ tsecurity.de Intelligence
Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 86%
Öffentlich erreichbare Dienste mit OpenVAS scannen, WAF-Regeln schärfen, Patch-Fenster verkürzen.
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
16 Quellen
CVE-2026-18031 | TabaPay Gateway Plugin up to 1.4.0 on WordPress improper authentication
15 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2026-18777 | TrueBooker Plugin up to 1.2.6 on WordPress authorization VVulDB Updatesvor 3 Std.CVE-2026-18776 | TrueBooker Plugin up to 1.2.6 on WordPress privileges management VVulDB Updatesvor 3 Std.CVE-2026-18231 | WP Directory Kit Plugin up to 1.5.6 on WordPress information disclosure VVulDB Updatesvor 3 Std.CVE-2026-18051 | W3 Total Cache Plugin up to 2.10.4 on WordPress path traversal VVulDB Updatesvor 3 Std.CVE-2026-18466 | WP Maps Plugin up to 4.9.7 on WordPress access control VVulDB Updatesvor 3 Std.CVE-2026-16979 | SmartCrawl Plugin up to 3.16.2 on WordPress authorization
+9
14 Quellen
CVE-2026-64249 | Linux Kernel up to 7.1.2 FPGA Region child_regions_with_firmware use after free (Nessus ID 330014)
13 weitere Quellen
VVulDB Updatesvor 6 Std.CVE-2026-64246 | Linux Kernel up to 7.1.2 Linkstation Poweroff linkstation_poweroff_init use after free (Nessus ID 330014 / WID-SEC-2026-2527) VVulDB Updatesvor 6 Std.CVE-2026-64247 | Linux Kernel up to 6.6.143/6.12.94/6.18.37/7.1.2 Hyper-V Sparse Bank hv_is_vp_in_sparse_set use after free VVulDB Updatesvor 6 Std.CVE-2026-64254 | Linux Kernel up to 7.1.2 epf mm/vmalloc.c ntb_epf_pci_remove memory corruption (Nessus ID 330014) VVulDB Updatesvor 6 Std.CVE-2026-64245 | Linux Kernel up to 6.6.143/6.12.94/6.18.37/7.1.2 fbdev/modedb modedb.c fb_find_mode mode_option use after free (WID-SEC-2026-2527) VVulDB Updatesvor 6 Std.CVE-2026-64251 | Linux Kernel up to 6.12.94/6.18.37/7.1.2 pwrseq pwrseq_debugfs_seq_next use after free VVulDB Updatesvor 6 Std.CVE-2026-64248 | Linux Kernel up to 7.1.2 RCU kernel/irq_work.c stop_this_cpu use after free
+7
12 Quellen
CVE-2026-100216 | Microsoft Windows up to Server 2025 buffer overflow (WID-SEC-2026-3892)
11 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-100217 | Microsoft Windows up to Server 2025 Group Policy privileges management (WID-SEC-2026-3892) VVulDB Updatesvor 2 Std.CVE-2026-100218 | Microsoft Windows up to Server 2025 Remote Desktop Gateway Service use after free (WID-SEC-2026-3892) VVulDB Updatesvor 2 Std.CVE-2026-100220 | Microsoft Windows up to Server 2025 Media Video Decoder heap-based overflow (WID-SEC-2026-3892) VVulDB Updatesvor 2 Std.CVE-2026-100219 | Microsoft Windows up to Server 2025 QUIC use after free (WID-SEC-2026-3892) VVulDB Updatesvor 2 Std.CVE-2026-100225 | Microsoft Windows up to Server 2025 Storage buffer overflow (WID-SEC-2026-3892) VVulDB Updatesvor 2 Std.CVE-2026-100222 | Microsoft Windows up to Server 2025 Network Policy Server buffer overflow (WID-SEC-2026-3892)
+5
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4324800/it-security-nachrichten/zyxel-gs1900-patch-fails-to-block-zero-day-exploit-allowing-root-command-execution/