Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found. The exploit lets anyone who can reach a switch's web management interface run commands on it without logging in. Zyxel has released new firmware for 10 GS1900 models that... Weiterlesen: Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Comm…
Intelligence View
⚡ tsecurity.de Intelligence
Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 86%
Scan public-facing services with OpenVAS, sharpen WAF rules, shorten patch windows.
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
10 sources
CVE-2026-124684 | Samsung Escargot use after free (EUVD-2026-119996)
9 more sources
VVulDB Updates2 hours agoCVE-2026-92546 | Keepnet Labs Cybersecurity Agentic AI/Agentic Ally improper authentication (0ef61f2e / EUVD-2026-110830) VVulDB Updates2 hours agoCVE-2026-123779 | Apache Axis2/Java Metadata Routes exposeServiceMetadata access control (EUVD-2026-119978) VVulDB Updates2 hours agoCVE-2026-123770 | Apache Axis2/Java resource consumption (EUVD-2026-119934) VVulDB Updates2 hours agoCVE-2026-120832 | Apache Axis2/Java Schema Import Resolution server-side request forgery (EUVD-2026-119929) VVulDB Updates2 hours agoCVE-2026-123753 | Apache Axis2 Java WS-Addressing server-side request forgery (EUVD-2026-119936) VVulDB Updates2 hours agoCVE-2026-120367 | Apache Axis2/Java Request Body buffer overflow (EUVD-2026-119980)
+3
7 sources
Samsung’s One UI 9 Watch Update Is Here — But Galaxy Watch8 Owners Face a Regional Wait
6 more sources
GGiga.de1 hour agoSamsung Galaxy Watch 8 und Classic erhalten großes Software-Update Tt3n.de2 hours agoGalaxy AI: Samsung will für KI-Funktionen offenbar Geld sehen – das steckt im geplanten Abo CCaschys Blog2 hours agoSamsung Galaxy AI: Kostenpflichtiges Abo in Vorbereitung AAndroid1 hour agoSamsung Galaxy Watch 8 und Classic erhalten großes Software-Update Tt3n.de2 hours agoGalaxy AI: Samsung will für KI-Funktionen offenbar Geld sehen – das steckt im geplanten Abo LLatest from TechRadar3 hours agoSamsung is reportedly testing a Galaxy AI Premium subscription service
7 sources
Is Jensen Huang Too Powerful to Be Punished by Nvidia?
6 more sources
WWIRED36 min. agoJensen Huang Hired a PR Firm Known for Handling Sex Scandals Last Year NNYT > Artificial Intelligen…1 hour agoHow Indispensable Is Jensen Huang? NNYT > Artificial Intelligen…1 hour agoIs Jensen Huang Too Powerful to Be Punished by Nvidia? RSS«Hacker News» 🗞️🦾 IT BOLTWI…1 hour agoNVIDIA: Jensen Huang gesteht Affäre – Board startet unabhängige Untersuchung GGolem.de2 hours agoJensen Huang: Was die Spionage-Affäre für Nvidia bedeutet NNYT > Artificial Intelligen…2 hours agoChina Rejects Espionage Claims Involving Nvidia C.E.O. Jensen Huang
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4324800/cyber-security-bulletins/zyxel-gs1900-patch-fails-to-block-zero-day-exploit-allowing-root-command-execution/