8.8

CVE-2026-7273

A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerZyxel
≫
Produkt GS1900-48HPv2 firmware
Default Statusunaffected
Version <= 2.90(ABTQ.1)C0
Status affected
HerstellerZyxel
≫
Produkt GS1900-8 firmware
Default Statusunaffected
Version <= 2.90(AAHH.1)C0
Status affected
HerstellerZyxel
≫
Produkt GS1900-8HP firmware
Default Statusunaffected
Version <= 2.90(AAHI.1)C0
Status affected
HerstellerZyxel
≫
Produkt GS1900-10HP firmware
Default Statusunaffected
Version <= 2.90(AAZI.1)C0
Status affected
HerstellerZyxel
≫
Produkt GS1900-16 firmware
Default Statusunaffected
Version <= 2.90(AAHJ.1)C0
Status affected
HerstellerZyxel
≫
Produkt GS1900-24 firmware
Default Statusunaffected
Version <= 2.90(AAHL.1)C0
Status affected
HerstellerZyxel
≫
Produkt GS1900-24E firmware
Default Statusunaffected
Version <= 2.90(AAHK.1)C0
Status affected
HerstellerZyxel
≫
Produkt GS1900-24EP firmware
Default Statusunaffected
Version <= 2.90(ABTO.1)C0
Status affected
HerstellerZyxel
≫
Produkt GS1900-24HPv2 firmware
Default Statusunaffected
Version <= 2.90(ABTP.1)C0
Status affected
HerstellerZyxel
≫
Produkt GS1900-48 firmware
Default Statusunaffected
Version <= 2.90(AAHN.1)C0
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.231
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
security@zyxel.com.tw 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-stack-based-buffer-overflow-vulnerability-in-gs1900-series-switches-06-16-2026