Zyxel GS1900 Switches Exploited Through Zero-Day Vulnerability CVE-2026-107441

Cybersecurity company Binarly has disclosed that attacks affecting nearly 1,000 Zyxel GS1900 series switches were actually carried out using a newly disclosed zero-day vulnerability, CVE-2026-107441. This out-of-bounds write flaw allows unauthenticated attackers to execute operating system commands, with Zyxel releasing security updates to address the issue.