Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access

CISA has added CVE-2026-7273, a stack-based buffer overflow vulnerability affecting Zyxel GS1900 series switches, to its Known Exploited Vulnerabilities catalog. The flaw carries a CVSS score of 8.8 and can result in arbitrary operating system command execution. A separate Veeam vulnerability is also referenced as being under active exploitation. Both vulnerabilities grant attackers elevated access, including SYSTEM-level privileges. The article highlights the urgency for organizations to apply available patches. Active exploitation evidence prompted CISA's inclusion of these flaws in the KEV catalog. The Zyxel flaw is a now-patched buffer overflow in network switch firmware. Organizations using affected Zyxel GS1900 series switches and Veeam products are urged to remediate immediately.