<![CDATA[🟠 High: CISA orders feds to patch Zyxel flaw exploited for data theft]]>CISA has added a high-severity flaw in Zyxel GS1900 series switches to its list of actively exploited vulnerabilities, ordering federal agencies to patch by Thursday. Attackers are already using the flaw for data theft, according to the agency.

The vulnerability affects Zyxel GS1900 switches, and exploitation has been observed in the wild. CISA's binding directive requires federal civilian agencies to apply mitigations or remove affected devices from their networks within the given deadline.

Key facts:

  • Product: Zyxel GS1900 series switches
  • Status: actively exploited in the wild
  • Impact: data theft
  • Action: federal agencies ordered to patch by Thursday

Administrators running these switches should prioritize patching and review their exposure immediately.

Source: BleepingComputer

Are any of you running Zyxel GS1900 switches in production, and how are you handling the patch?

]]>https://xploitlk.com/topic/425/high-cisa-orders-feds-to-patch-zyxel-flaw-exploited-for-data-theftRSS for NodeTue, 27 Oct 2026 11:01:20 GMTTue, 22 Sep 2026 12:30:19 GMT60