Vulnerability Details CVE-2026-7273
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.02
EPSS Ranking 79.7%
CVSS Severity
CVSS v3 Score 8.8
Proposed Action
Zyxel GS1900 series switches contain a stack-based buffer overflow vulnerability in the CGI program which could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.
Ransomware Campaign
Unknown
Products affected by CVE-2026-7273
-
cpe:2.3:h:zyxel:gs1900-10hp:-
-
cpe:2.3:h:zyxel:gs1900-16:-
-
cpe:2.3:h:zyxel:gs1900-24:-
-
cpe:2.3:h:zyxel:gs1900-24e:-
-
cpe:2.3:h:zyxel:gs1900-24ep:-
-
cpe:2.3:h:zyxel:gs1900-48:-
-
cpe:2.3:h:zyxel:gs1900-48hpv2:-
-
cpe:2.3:h:zyxel:gs1900-8hp:-
-
cpe:2.3:o:zyxel:gs1900-10hp_firmware:-
-
cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.40
-
cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.50(aazi.0)c0
-
cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.70
-
cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.70(aazi.0)-20211208
-
cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.70(aazi.3)
-
cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.70(aazi.3)c0
-
cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.70(aazi.5)
-
cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.80(aazi.0)
-
cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.80(aazi.0)c0
-
cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.80(aazi.1)c0
-
cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.90(aazi.0)c0
-
cpe:2.3:o:zyxel:gs1900-10hp_firmware:2.90(aazi.1)c0
-
cpe:2.3:o:zyxel:gs1900-24_firmware:-
-
cpe:2.3:o:zyxel:gs1900-24_firmware:2.40
-
cpe:2.3:o:zyxel:gs1900-24_firmware:2.50(aahl.0)c0
-
cpe:2.3:o:zyxel:gs1900-24_firmware:2.70
-
cpe:2.3:o:zyxel:gs1900-24_firmware:2.70(aahl.0)-20211208
-
cpe:2.3:o:zyxel:gs1900-24_firmware:2.70(aahl.3)
-
cpe:2.3:o:zyxel:gs1900-24_firmware:2.70(aahl.3)c0
-
cpe:2.3:o:zyxel:gs1900-24_firmware:2.70(aahl.5)
-
cpe:2.3:o:zyxel:gs1900-24_firmware:2.80(aahl.0)
-
cpe:2.3:o:zyxel:gs1900-24_firmware:2.80(aahl.0)c0
-
cpe:2.3:o:zyxel:gs1900-24_firmware:2.80(aahl.1)c0
-
cpe:2.3:o:zyxel:gs1900-24_firmware:2.90(aahl.0)c0
-
cpe:2.3:o:zyxel:gs1900-24_firmware:2.90(aahl.1)c0
-
cpe:2.3:o:zyxel:gs1900-24ep_firmware:2.70
-
cpe:2.3:o:zyxel:gs1900-24ep_firmware:2.70(abto.0)-20211208
-
cpe:2.3:o:zyxel:gs1900-24ep_firmware:2.70(abto.3)
-
cpe:2.3:o:zyxel:gs1900-24ep_firmware:2.70(abto.3)c0
-
cpe:2.3:o:zyxel:gs1900-24ep_firmware:2.70(abto.5)
-
cpe:2.3:o:zyxel:gs1900-24ep_firmware:2.80(abto.0)
-
cpe:2.3:o:zyxel:gs1900-24ep_firmware:2.80(abto.0)c0
-
cpe:2.3:o:zyxel:gs1900-24ep_firmware:2.80(abto.1)c0
-
cpe:2.3:o:zyxel:gs1900-24ep_firmware:2.90(abto.0)c0
-
cpe:2.3:o:zyxel:gs1900-24ep_firmware:2.90(abto.1)c0
-
cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:2.70
-
cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:2.70(aatp.0)-20211208
-
cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:2.70(abtp.3)
-
cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:2.70(abtp.3)c0
-
cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:2.70(abtp.5)
-
cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:2.80(abtp.0)
-
cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:2.80(abtp.0)c0
-
cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:2.80(abtp.1)c0
-
cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:2.90(abtp.0)c0
-
cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:2.90(abtp.1)c0
-
cpe:2.3:o:zyxel:gs1900-48_firmware:-
-
cpe:2.3:o:zyxel:gs1900-48_firmware:2.40
-
cpe:2.3:o:zyxel:gs1900-48_firmware:2.50(aahn.0)c0
-
cpe:2.3:o:zyxel:gs1900-48_firmware:2.70
-
cpe:2.3:o:zyxel:gs1900-48_firmware:2.70(aahn.0)-20211208
-
cpe:2.3:o:zyxel:gs1900-48_firmware:2.70(aahn.3)
-
cpe:2.3:o:zyxel:gs1900-48_firmware:2.70(aahn.3)c0
-
cpe:2.3:o:zyxel:gs1900-48_firmware:2.70(aahn.5)
-
cpe:2.3:o:zyxel:gs1900-48_firmware:2.80(aahn.0)
-
cpe:2.3:o:zyxel:gs1900-48_firmware:2.80(aahn.0)c0
-
cpe:2.3:o:zyxel:gs1900-48_firmware:2.80(aahn.1)c0
-
cpe:2.3:o:zyxel:gs1900-48_firmware:2.90(aahn.0)c0
-
cpe:2.3:o:zyxel:gs1900-48_firmware:2.90(aahn.1)c0
-
cpe:2.3:o:zyxel:gs1900-8_firmware:-
-
cpe:2.3:o:zyxel:gs1900-8_firmware:2.40
-
cpe:2.3:o:zyxel:gs1900-8_firmware:2.50(aaho.0)c0
-
cpe:2.3:o:zyxel:gs1900-8_firmware:2.70
-
cpe:2.3:o:zyxel:gs1900-8_firmware:2.70(aahh.0)-20211208
-
cpe:2.3:o:zyxel:gs1900-8_firmware:2.70(aahh.3)
-
cpe:2.3:o:zyxel:gs1900-8_firmware:2.70(aahh.3)c0
-
cpe:2.3:o:zyxel:gs1900-8_firmware:2.70(aahh.5)
-
cpe:2.3:o:zyxel:gs1900-8_firmware:2.80(aahh.0)
-
cpe:2.3:o:zyxel:gs1900-8_firmware:2.80(aahh.0)c0
-
cpe:2.3:o:zyxel:gs1900-8_firmware:2.80(aahh.1)c0
-
cpe:2.3:o:zyxel:gs1900-8_firmware:2.90(aahh.0)c0
-
cpe:2.3:o:zyxel:gs1900-8_firmware:2.90(aahh.1)c0
-
cpe:2.3:o:zyxel:gs1900-8hp_firmware:-
-
cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.40
-
cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.50(aahi.0)c0
-
cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.70
-
cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.70(aahi.0)-20211208
-
cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.70(aahi.3)
-
cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.70(aahi.3)c0
-
cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.70(aahi.5)
-
cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.80(aahi.0)
-
cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.80(aahi.0)c0
-
cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.80(aahi.1)c0
-
cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.90(aahi.0)c0
-
cpe:2.3:o:zyxel:gs1900-8hp_firmware:2.90(aahi.1)c0