CISA orders federal agencies to patch actively exploited Zyxel switch flaw

Image: Primary

Published Tuesday, September 22, 2026 · 6:07 AM EDT

The U.S. Cybersecurity and Infrastructure Security Agency added a command-execution flaw in Zyxel GS1900 switches to its Known Exploited Vulnerabilities catalog and ordered federal civilian agencies to secure affected devices by Thursday. CVE-2026-7273 is a stack-based buffer overflow that lets an unauthenticated attacker on the local network send a crafted HTTP request and execute operating-system commands. Zyxel issued corrected firmware on June 16. GreyNoise reported that a suspected Chinese-speaking actor exploited the flaw to extract sensitive data from 996 switches across 48 countries, although CISA has not released details of the attacks.

Sources

BleepingComputer

In this story

US Government China

Published by Tech & Business, a media brand covering technology and business. This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Science Security

Preprint links restricted AI access to increased vulnerability disclosures

A preprint studying Project Glasswing finds that firms given early access to Claude Mythos Preview more than doubled vulnerability disclosures relative to Chinese and Russian tech firms without access.

Security

Security researchers report rentable proxy access through White House network

Security firm Layer3 Intel says 28 residential proxy services allowed customers' traffic to exit through the internet address network reserved for the Executive Office of the President.

Security

Researchers demonstrate Android crash loop triggered by app installation

Bitdefender researchers demonstrated an Android flaw called GhostMap that lets an installed app trigger a persistent crash loop without requesting permissions or being launched, BleepingComputer reported.

Security

OpenSSH releases workaround for critical flaw affecting some Alpine Linux systems

OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability affecting Linux systems that use musl libc with PAM disabled, LWN reported.

Security

IonQ agrees to acquire Elisity for quantum security platform

IonQ agreed to acquire security specialist Elisity to integrate identity-based access controls into its quantum security platform, Yahoo Finance reported.

Security Capital

Palo Alto Networks in talks to buy Clutch Security for around $500 million

Palo Alto Networks is in talks to acquire Clutch Security for around $500 million, The Information reported, citing people familiar with the matter. The three-year-old Israeli security startup develops software that tracks passwords used by AI agents.