# Zyxel advisory identifies separate flaw behind switch compromises

_Published Wednesday, November 4, 2026 at 4:19 PM EST · Security · Latest · Tier 2 — Notable_

![Zyxel advisory identifies separate flaw behind switch compromises — Primary](https://www.bleepstatic.com/content/hl-images/2026/11/04/zyxel-gs1900.jpg)

Zyxel published a November 3 advisory for CVE-2026-107441, a separate vulnerability behind attacks previously attributed to an older patched flaw, Bleeping Computer reported. GreyNoise reported that attackers compromised 996 switches across 48 countries, collecting configurations, hashed root credentials and network information.

The flaw affects ten GS1900 models and lets an unauthenticated attacker with network access execute commands through crafted HTTP requests. Binarly found the exploit worked against firmware patched for the older vulnerability. Zyxel's October 22 updates limit parameter sizes and validate parameter counts before copying data into memory.

## Sources

- [Bleeping Computer](https://www.bleepingcomputer.com/news/security/zyxel-fixes-zero-day-exploited-to-hack-nearly-1-000-network-switches/)

---
Canonical: https://techandbusiness.org/newswire/wsXM6pA2Kh-xtLB-WT6ljT
Published: 2026-11-04T21:19:07.898Z
Story chronology: 2026-11-03T00:00:00.000Z
Retrieved: 2026-11-04T23:41:43.104Z
Publisher: Tech & Business (techandbusiness.org)