{"affected":[{"defaultStatus":"unaffected","product":"GS1900-24E firmware","source":"CNA: Zyxel","vendor":"Zyxel","versions":[{"status":"affected","version":"<= 2.90(AAHK.2)C0"}]},{"defaultStatus":"unaffected","product":"GS1900-8 firmware","source":"CNA: Zyxel","vendor":"Zyxel","versions":[{"status":"affected","version":"<= 2.90(AAHH.2)C0"}]},{"defaultStatus":"unaffected","product":"GS1900-8HP firmware","source":"CNA: Zyxel","vendor":"Zyxel","versions":[{"status":"affected","version":"<= 2.90(AAHI.2)C0"}]},{"defaultStatus":"unaffected","product":"GS1900-10HP firmware","source":"CNA: Zyxel","vendor":"Zyxel","versions":[{"status":"affected","version":"<= 2.90(AAZI.2)C0"}]},{"defaultStatus":"unaffected","product":"GS1900-16 firmware","source":"CNA: Zyxel","vendor":"Zyxel","versions":[{"status":"affected","version":"<= 2.90(AAHJ.2)C0"}]},{"defaultStatus":"unaffected","product":"GS1900-24 firmware","source":"CNA: Zyxel","vendor":"Zyxel","versions":[{"status":"affected","version":"<= 2.90(AAHL.2)C0"}]},{"defaultStatus":"unaffected","product":"GS1900-24EP firmware","source":"CNA: Zyxel","vendor":"Zyxel","versions":[{"status":"affected","version":"<= 2.90(ABTO.2)C0"}]},{"defaultStatus":"unaffected","product":"GS1900-HPv2 firmware","source":"CNA: Zyxel","vendor":"Zyxel","versions":[{"status":"affected","version":"<= 2.90(ABTP.2)C0"}]},{"defaultStatus":"unaffected","product":"GS1900-48 firmware","source":"CNA: Zyxel","vendor":"Zyxel","versions":[{"status":"affected","version":"<= 2.90(AAHN.2)C0"}]},{"defaultStatus":"unaffected","product":"GS1900-48HPv2 firmware","source":"CNA: Zyxel","vendor":"Zyxel","versions":[{"status":"affected","version":"<= 2.90(ABTQ.2)C0"}]}],"cveId":"CVE-2026-107441","cwes":["CWE-787"],"description":"An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an unauthenticated adjacent attacker  to exploit the flaw and potentially execute OS commands via a crafted HTTP request.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.8,"severity":"high","source":"CNA: Zyxel","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793670112029,"publishedAt":1793670112029,"references":[{"source":"CNA: Zyxel","tags":["vendor-advisory"],"url":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-out-of-bounds-write-vulnerability-in-gs1900-series-switches-11-03-2026"}],"remediation":[],"revision":"96110759b4d43aa0f66f2fafa79c2560fc3c4d2a8ab751f87f7706da751c9cd5","sources":[{"modifiedAt":1793670112029,"name":"CNA: Zyxel","retrievedAt":1793671698885,"url":"https://www.cve.org/CVERecord?id=CVE-2026-107441"}],"ssvc":null,"status":"published","title":"CVE-2026-107441","updatedAt":1793671698885}