CVE-2026-107441: The June patch left Zyxel network switches open to hackers

Not listed so far in CISA’s catalog of actively exploited vulnerabilities.

Our analyses

The June patch left Zyxel network switches open to hackers

Nearly 1,000 devices were hacked in 48 countries, according to GreyNoise. Zyxel has released new firmware for ten GS1900 models: here are the versions to install, even if you applied the June update.

Nov 5, 20262 min read

Alerts and vulnerabilities from CERT Santé, the French healthcare CERT

CVSS 8.8Nov 3

Zyxel - CVE-2026-107441

Patch available

What to do

Check whether your estate includes the affected product, including internet-facing devices.
Apply the vendor’s patch or mitigations (references below).
Watch for exploitation: this entry is updated if the vulnerability enters the exploited catalog or is the subject of a CERT-FR alert.

References

NVD entry (NIST)