Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Zyxel Releases Security Update for GS1900 Series Switch Vulnerability

Successful exploitation of CVE-2026-107441 could allow an unauthenticated attacker with local area network (LAN) access to execute operating system commands on affected switches

Threat ID:
CC-4885
Threat Severity:
Medium
Published:
5 November 2026 4:25 PM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Successful exploitation of CVE-2026-107441 could allow an unauthenticated attacker with local area network (LAN) access to execute operating system commands on affected switches

Threat details

Reported Exploitation of CVE-2026-107441

Binarly researchers report that attackers possessed a working exploit for CVE-2026-107441 before the vulnerability was publicly disclosed. The exploit was discovered on attacker-controlled infrastructure and remained effective against 2.90 Patch 2 firmware.

The NHS England National CSOC assesses further exploitation as likely.

Introduction

Zyxel has released security updates addressing an out-of-bounds write vulnerability in its GS1900 series switches. Successful exploitation could allow a LAN based, unauthenticated attacker to execute operating system commands by sending a specially crafted HTTP request to an affected device.

  • CVE-2026-107441 – 'Out-of-bounds Write' vulnerability – CVSS v3.1 score: 8.8

Remediation advice

Affected organisations are encouraged to review the Zyxel Security Advisory and apply the relevant updates as soon as possible.

Last edited: 5 November 2026 4:54 pm