Zyxel GS1900 Series Switches Remain Vulnerable to Exploitation Despite Patches

Zyxel's GS1900 series of managed switches are affected by a critical pre-authentication out-of-bounds write vulnerability (CVE-2026-107441). Despite a security advisory published on November 3, 2026, and corrected firmware released on October 22, researchers report that attackers are still exploiting the flaw against switches that had applied previous fixes, highlighting confusion around CVE-2026-7273.