The Canadian Centre for Cyber Security updated its Zyxel advisory, citing open-source reports that CVE-2026-107441 is being exploited. The vulnerability affects GS1900 series switches, for which the manufacturer has published fixes.

The original advisory, dated November 3, also covers vulnerabilities in access points, FWA7 devices and security routers. Administrators should compare their model and firmware version with Zyxel’s bulletins and install the appropriate updates. The statement about exploitation comes from the Canadian advisory, which attributes it to publicly available reporting.

Original source

Canadian Centre for Cyber Security

Zyxel security advisory (AV26-1114) – Update 1

A recent selection checked against official sources; it does not claim to cover the three latest stories published worldwide.

Additional documentation

Zyxel security advisory for out-of-bounds write vulnerability in GS1900 series switches ↗

The manufacturer confirms the vulnerability and availability of patches; the exploitation report is attributed solely to the Canadian advisory.

Original CYBERSEC.mx summary based on the linked sources. Refer to the original documents for technical details and updates.