CriticalVulnerabilities
Zyxel switch hacks traced to a true zero-day, not an old bug
Attacks first blamed on a patched flaw actually used CVE-2026-107441, an out-of-bounds write that allows OS commands through crafted HTTP requests.
SecurityWeek
Velkrypt Wire
Attacks first blamed on a patched flaw actually used CVE-2026-107441, an out-of-bounds write that allows OS commands through crafted HTTP requests.