Vulnerability Management Analyst: 2026-09-22

1. CISA Adds One Known Exploited Vulnerability to Catalog

   CISA, 2026-09-21. Read, 2 min.

   CISA added CVE-2026-7273, a stack-based buffer overflow in the CGI program of Zyxel GS1900 series switches, to its Known Exploited Vulnerabilities catalog on September 21, 2026, based on evidence of active exploitation. Zyxel’s advisory of June 16, 2026 describes the flaw as letting a LAN-based, unauthenticated attacker potentially execute operating-system commands through a crafted HTTP request, and lists patched firmware for each affected GS1900 model.

   Why it matters for this role: You rank and drive fixes, and a KEV listing for CVE-2026-7273 with patched Zyxel firmware available since June 16, 2026 moves any exposed GS1900 switch to the top of your remediation list.

Vulnerability Management Analyst