{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/gs1900-24e-through-firmware-2.90aahk.2c0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:zyxel:gs1900_24e:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-107441"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=CVE-2026-107441\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":["GS1900-24E (through firmware 2.90(AAHK.2)C0)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Zyxel"],"content_html":"\u003cp\u003eAn out-of-bounds write vulnerability exists in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0. This flaw may allow an unauthenticated adjacent attacker to potentially execute OS commands via a crafted HTTP request. The vulnerability is identified as CVE-2026-107441 with a CVSS v3.1 base score of 8.8.\u003c/p\u003e\n","date_modified":"2026-11-03T04:05:16Z","date_published":"2026-11-03T03:50:17Z","id":"https://feed.craftedsignal.io/briefs/2026-11-zyxel-gs1900-24e-oob-write/","summary":"An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an unauthenticated adjacent attacker to potentially execute OS commands via a crafted HTTP request.","title":"Zyxel GS1900-24E: Out-of-bounds write vulnerability (CVE-2026-107441)","url":"https://feed.craftedsignal.io/briefs/2026-11-zyxel-gs1900-24e-oob-write/"}],"language":"en","title":"CraftedSignal Threat Feed - GS1900-24E (Through Firmware 2.90(AAHK.2)C0)","version":"https://jsonfeed.org/version/1.1"}