Zyxel GS1900 zero-day bypasses earlier fix; model-specific Patch 3 required
Binarly reports active exploitation of an unauthenticated adjacent-network zero-day in Zyxel GS1900 switches. New coverage says the earlier June fix/Patch 2 failed and affected models require specific Patch 3 (.3C0) builds; attackers reportedly compromised 996 switches and collected configurations, network information, and hashed root credentials. Patch and investigate for prior access; the articles provide no publication date to confirm a new 48-hour development.
Sources (2)
Updated Nov 6, 2026