> ## Content Index
> Fetch the complete content index at: https://cyfrz.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Zyxel Switch Zero Day Slipped Past an Earlier Patch, Researchers Say
- URL: https://cyfrz.com/zyxel-switch-zero-day-slipped-past-an-earlier-patch-researchers-say/
- Published: 2026-11-12T07:44:23.000Z
- Updated: 2026-11-12T07:44:23.000Z
- Author: 9ino
- Tags: Vulnerabilities, News

Binarly says a flaw in the web management interface of ten Zyxel GS1900 switch models allows unauthenticated command execution, and that a patch issued in June did not stop the exploit. Zyxel disclosed the issue on November 3 and rates it 8.8 out of 10, while Binarly rates it 9.8\. Binarly places the exploit around mid August, roughly eight weeks before the flaw received an identifier, though Zyxel has not confirmed attacks. Separately, GreyNoise reported in September that 996 switches in 48 countries were compromised, more than half still using factory default credentials, and Acronis links related malware to a Chinese speaking cluster called Red Heron. Admins should install Patch 3, reset credentials, and keep management interfaces off untrusted networks. For more, visit the [Cloud Security Alliance](https://labs.cloudsecurityalliance.org/research/csa-research-note-edge-mfa-bypass-zero-days-20261108-csa-sty/?ref=cyfrz.com).