CVE-2026-7273 - Vulnerability Details - OpenCVE

A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

No data.

References

Link	Providers
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-stack-based-buffer-overflow-vulnerability-in-gs1900-series-switches-06-16-2026

History

Tue, 16 Jun 2026 06:30:00 +0000

Type	Values Removed	Values Added
Description		A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.
Weaknesses		CWE-121
References		https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-stack-based-buffer-overflow-vulnerability-in-gs1900-series-switches-06-16-2026
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: Zyxel

Published: 2026-06-16T02:20:29.847Z

Updated: 2026-06-16T02:20:29.847Z

Reserved: 2026-04-28T06:21:36.574Z

Link: CVE-2026-7273

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-06-16T03:16:13.557

Modified: 2026-06-16T03:16:13.557

Link: CVE-2026-7273

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-7273", "assignerOrgId": "96e50032-ad0d-4058-a115-4d2c13821f9f", "state": "PUBLISHED", "assignerShortName": "Zyxel", "dateReserved": "2026-04-28T06:21:36.574Z", "datePublished": "2026-06-16T02:20:29.847Z", "dateUpdated": "2026-06-16T02:20:29.847Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "96e50032-ad0d-4058-a115-4d2c13821f9f", "shortName": "Zyxel", "dateUpdated": "2026-06-16T02:20:29.847Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-121", "description": "CWE-121 Stack-based buffer overflow", "type": "CWE"}]}], "affected": [{"vendor": "Zyxel", "product": "GS1900-48HPv2 firmware", "versions": [{"status": "affected", "version": "<= 2.90(ABTQ.1)C0"}], "defaultStatus": "unaffected"}, {"vendor": "Zyxel", "product": "GS1900-8 firmware", "versions": [{"status": "affected", "version": "<= 2.90(AAHH.1)C0"}], "defaultStatus": "unaffected"}, {"vendor": "Zyxel", "product": "GS1900-8HP firmware", "versions": [{"status": "affected", "version": "<= 2.90(AAHI.1)C0"}], "defaultStatus": "unaffected"}, {"vendor": "Zyxel", "product": "GS1900-10HP firmware", "versions": [{"status": "affected", "version": "<= 2.90(AAZI.1)C0"}], "defaultStatus": "unaffected"}, {"vendor": "Zyxel", "product": "GS1900-16 firmware", "versions": [{"status": "affected", "version": "<= 2.90(AAHJ.1)C0"}], "defaultStatus": "unaffected"}, {"vendor": "Zyxel", "product": "GS1900-24 firmware", "versions": [{"status": "affected", "version": "<= 2.90(AAHL.1)C0"}], "defaultStatus": "unaffected"}, {"vendor": "Zyxel", "product": "GS1900-24E firmware", "versions": [{"status": "affected", "version": "<= 2.90(AAHK.1)C0"}], "defaultStatus": "unaffected"}, {"vendor": "Zyxel", "product": "GS1900-24EP firmware", "versions": [{"status": "affected", "version": "<= 2.90(ABTO.1)C0"}], "defaultStatus": "unaffected"}, {"vendor": "Zyxel", "product": "GS1900-24HPv2 firmware", "versions": [{"status": "affected", "version": "<= 2.90(ABTP.1)C0"}], "defaultStatus": "unaffected"}, {"vendor": "Zyxel", "product": "GS1900-48 firmware", "versions": [{"status": "affected", "version": "<= 2.90(AAHN.1)C0"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through\u00a02.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request."}]}], "references": [{"url": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-stack-based-buffer-overflow-vulnerability-in-gs1900-series-switches-06-16-2026", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}}}