importantSYS.SOURCE: The Hacker News• 2026-09-22T11:01:59+05:30

Active Exploitation of Zyxel and Veeam Vulnerabilities Enables Command Execution and SYSTEM Access

#vulnerability #network security #endpoint security #cybersecurity

The U.S. CISA has added a critical buffer overflow vulnerability in Zyxel GS1900 switches (CVE-2026-7273, CVSS 8.8) to its KEV catalog due to active exploitation, enabling OS command execution. A separate privilege escalation flaw in Veeam Agent for Windows (CVE-2026-32996, CVSS 7.3) allows attackers to gain SYSTEM-level access via local exploitation.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched security flaw impacting Zyxel GS1900 series switches to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.

The vulnerability, tracked as CVE-2026-7273 (CVSS score: 8.8), is a stack-based buffer overflow vulnerability that could result in arbitrary operating

Read original article

*** END OF TRANSMISSION ***

> AI ADOPTION AMONG YOUNG USERS (9-18) RAISES CONCERNS OVER CRITICAL THINKING DEVELOPMENT > APPLE REMOVES USER CONSENT OPTION FOR AI FEATURES IN MACOS 15.3 UPDATE > SIDECOPY APT GROUP EXPANDS TARGETING OF INDIAN ACADEMIA VIA REVERSERAT SPEAR-PHISHING > HIDDEN META MUSE SETTING ENABLES AI ASSISTANT BACKDOOR VIA DICTATION HIJACKING > GZIP AS A LANGUAGE MODELING APPROACH VIA COMPRESSION-PREDICTION EQUIVALENCE > WORDPRESS COMMENT2SHELL VULNERABILITY EXPLOITS XSS TO ACHIEVE RCE VIA ADMIN SESSION > MORPHOTONICS SECURES €40M TO SCALE NANOIMPRINT LITHOGRAPHY FOR AR DISPLAYS AND DATA CENTER OPTICS > ACTIVE EXPLOITATION OF ZYXEL AND VEEAM VULNERABILITIES ENABLES COMMAND EXECUTION AND SYSTEM ACCESS > 2019 USED THINKPAD PURCHASE GUIDE: FEATURES, RECOMMENDATIONS, AND EBAY DEAL STRATEGIES > MIMO-V2.6-PRO MODEL ANALYSIS: INTELLIGENCE, PERFORMANCE, AND COST EVALUATION> AI ADOPTION AMONG YOUNG USERS (9-18) RAISES CONCERNS OVER CRITICAL THINKING DEVELOPMENT > APPLE REMOVES USER CONSENT OPTION FOR AI FEATURES IN MACOS 15.3 UPDATE > SIDECOPY APT GROUP EXPANDS TARGETING OF INDIAN ACADEMIA VIA REVERSERAT SPEAR-PHISHING > HIDDEN META MUSE SETTING ENABLES AI ASSISTANT BACKDOOR VIA DICTATION HIJACKING > GZIP AS A LANGUAGE MODELING APPROACH VIA COMPRESSION-PREDICTION EQUIVALENCE > WORDPRESS COMMENT2SHELL VULNERABILITY EXPLOITS XSS TO ACHIEVE RCE VIA ADMIN SESSION > MORPHOTONICS SECURES €40M TO SCALE NANOIMPRINT LITHOGRAPHY FOR AR DISPLAYS AND DATA CENTER OPTICS > ACTIVE EXPLOITATION OF ZYXEL AND VEEAM VULNERABILITIES ENABLES COMMAND EXECUTION AND SYSTEM ACCESS > 2019 USED THINKPAD PURCHASE GUIDE: FEATURES, RECOMMENDATIONS, AND EBAY DEAL STRATEGIES > MIMO-V2.6-PRO MODEL ANALYSIS: INTELLIGENCE, PERFORMANCE, AND COST EVALUATION