> TritonInfoSec News
Home / Sep 23, 2026 / Story
0
#5 The Hacker News general September 22, 2026 at 05:31 UTC

Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access

By [email protected] (The Hacker News)

AI Summary

CISA added CVE-2026-7273, a CVSS 8.8 stack-based buffer overflow in Zyxel GS1900-series switches, to its Known Exploited Vulnerabilities catalog after Chinese threat actors used it to exfiltrate data from 996 devices and over 18,500 backend database records. Federal agencies face a mandatory patching deadline, and the active exploitation by a nation-state actor makes this urgent for network administrators running Zyxel managed switches.

Read full article → https://thehackernews.com/2026/09/zyxel-and-veeam-…

Relevance score: 87.0/100

# More from September 23

  1. 1
    ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach BleepingComputer
  2. 2
    EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts BleepingComputer
  3. 3
    Check Point warns of Management Server zero-day exploited in attacks BleepingComputer
  4. 4
    WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers The Hacker News
  5. 6
    New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory The Hacker News
  6. 7
    New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups The Hacker News
  7. 8
    Google Fined €403 Million Over GDPR Violations Tied to Location Data The Hacker News
  8. 9
    Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer SecurityWeek
  9. 10
    Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme SecurityWeek