GCVE-110-NCSC-2026-468

Advisory PublishedCVSS 8.8/10

Vulnetix · Advisory published November 5, 2026

An out-of-bounds write vulnerability in Zyxel GS1900-24E firmware up to version 2.90(AAHK.2)C0 allows unauthenticated adjacent attackers to execute OS commands via crafted HTTP requests.

Download JSON Look up in the Resolve Platform

Weaknesses (CWE)

CWE-787Out-of-bounds Write

Risk Scores

CVSS 3.1

8.8/10

High · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
ZyXEL	vers:unknown/*	—	—
zyxel	vers:unknown/*	—	—
Zyxel	vers:unknown/*	—	—

Aliases

CVE-2026-107441

References

advisory

Browse GCVE Records

1,010 records in the GCVE database · Updated November 6, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Look up in the Resolve Platform Download JSON