NewsThe Hacker News
Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
More on Execution
Other advisories
- MediumCVE-2026-97371ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets
- Criticalghsa:GHSA-47w9-6r3f-938gLXD has restricted project bypass leading to arbitrary command execution
- HighCVE-2026-62284OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy
- CriticalCVE-2026-122193AWS Trusted Remote Execution (REX) setup-guide example SSM documents allow OS command injection (CVE-2026-122193)
- HighCVE-2026-54146OpenHuman: Remote Code Execution (RCE)
- HighCVE-2026-54146OpenHuman: Remote Code Execution (RCE)
- HighCVE-2026-109518Debian APT: Remote Code Execution (RCE)
- HighCVE-2026-109518Debian APT: Remote Code Execution (RCE)
Other news entries
- Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver ItNewsThe Hacker News
- ChatGPT Lockdown Mode Bypass: Phishing, Malware Delivery, and Silent Data ExfiltrationNewsCheck Point Research
- NCSC-2026-0467 [1.00] [M/H] Kwetsbaarheden verholpen in Google Android en Samsung MobileNewsNCSC-NL
- The Sandbox Fights Back: Joe Security Launches Adaptive DetonationNewsCSO Online
- Cisco UCS Central Software Remote Code Execution VulnerabilityNewsCisco PSIRT
- Android’s November 2026 Updates Patch Over 200 VulnerabilitiesNewsSecurityWeek
- Over 1,000 GitLab servers vulnerable to ongoing RCE attacksNewsBleepingComputer
- From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion pathsNewsMicrosoft Threat Intelligence
Source: https://thehackernews.com/2026/11/zyxel-gs1900-patch-fails-to-block-zero.html
ID