CISA Orders Federal Patch for Exploited Zyxel Flaw

CISA added CVE-2026-7273, a high-severity buffer overflow in Zyxel GS1900 switches, to its Known Exploited Vulnerabilities catalog on Monday and ordered federal agencies to patch by Thursday. GreyNoise says a suspected Chinese-speaking actor exfiltrated data from 996 switches across 48 countries, the first documented in-the-wild exploitation.