PT-2026-135851
CVE-2026-107441
·
Published
2026-11-03
·
Updated
2026-11-03
Description by
CVSS 3.1
8.8
HighMetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Zyxel GS1900-24E versions prior to 2.90(AAHK.2)C0
Description
An out-of-bounds write issue exists in the CGI program. This flaw allows an unauthenticated adjacent attacker to potentially execute OS commands by sending a crafted HTTP request. An out-of-bounds write occurs when a program writes data past the end of the intended buffer, which can lead to memory corruption.
Recommendations
Update Zyxel GS1900-24E to a version newer than 2.90(AAHK.2)C0.
Found an issue in the description? Have something to add? Feel free to write us 👾