Zyxel advisory identifies separate flaw behind switch compromises

Zyxel published a November 3 advisory for CVE-2026-107441, a separate vulnerability behind attacks previously attributed to an older patched flaw, Bleeping Computer reported. GreyNoise reported that attackers compromised 996 switches across 48 countries, collecting configurations, hashed root credentials and network information. The flaw affects ten GS1900 models and lets an unauthenticated attacker with network access execute commands through crafted HTTP requests. Binarly found the exploit worked against firmware patched for the older vulnerability. Zyxel's October 22 updates limit parameter sizes and validate parameter counts before copying data into memory.