Memory corruption
This is rated high severity (8.8 out of 10). There is no confirmed exploitation of it yet. Ask IT whether the affected products are in your estate.
An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an unauthenticated adjacent attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.
Exploitable from the same local network without any account, and no one has to click or open anything. High impact on confidentiality, integrity and availability.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability
Longer bar: easier to attack
Impact
Longer bar: more harm
1 link from the CVE record, grouped by site.
Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests.
Who's reporting
Official authority missing. no OfficialVendor statement missing. no VendorResearcher coverage missing. no Researcher
No corroborated perspectives yet. Treat claims cautiously.
