CVE-2026-7273

● KEV HIGH

A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw ...

Affects 0 products across 1 vendor.

CVSS 3.18.8
EPSS2.5%
Percentile84th
PatchUnknown
KEV Added2026-09-21
CVSS Vector — Plain English Exploitable from adjacent network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-121: Stack-Based Buffer Overflow

Buffer overflow corrupting the program stack, typically overwriting the return address for code execution.

◆ AI Analysis — automated analysis, not human-reviewed

A high severity vulnerability (CVE-2026-7273) affects the target system. A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTT...

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2026-7273?
A high severity vulnerability (CVE-2026-7273) affects the target system. A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTT...
What is the CVSS score for CVE-2026-7273?
CVE-2026-7273 has CVSS 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 2.5%.
Is CVE-2026-7273 actively exploited?
Yes. CVE-2026-7273 is in the CISA KEV catalog (added 2026-09-21). Active exploitation confirmed. Immediate patching required.
How do I remediate CVE-2026-7273?
Apply vendor patches for CVE-2026-7273. Monitor Zyxel advisories.
What systems are affected by CVE-2026-7273?
CVE-2026-7273 affects: Zyxel.
Vulnerability Details
CVE IDCVE-2026-7273
CVSS VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2026-06-16
Last Modified2026-09-22
ICS Relevance90%
Weakness (CWE)
Stack-Based Buffer Overflow
SourceNVD
Official Description

A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.

Source: NIST NVD / MITRE CVE Database

Affected Products
VendorProductFixed Version
Zyxel — —
Remediation

No patch URL on record. Monitor vendor security advisories directly.

Threat Intelligence
● Threat Intelligence Validated: September 2026 | Threat Age: 104 Days
CISA KEV● Active Exploitation Confirmed (added 2026-09-21)
Public ExploitNot confirmed
PoC CodeNot confirmed
Related CVEs affecting Zyxel
CVE-2017-7964 10.0 Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and... CVE-2008-1256 10.0 The ZyXEL P-660HW series router has "admin" as its default password, which al... CVE-2008-1255 10.0 The ZyXEL P-660HW series router maintains authentication state by IP address,... CVE-2015-6016 9.8 ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0), PMG5318-B20A devi... CVE-2008-1160 9.8 ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processe...
View all Zyxel CVEs →

This Vulnerability Is Being Actively Exploited

CVE-2026-7273 is on the CISA KEV list - confirmed active exploitation in the wild. BreachSpider flags known-exploited CVEs on the ICS assets they affect, with known-exploited status synced daily from CISA.

Create a free account →