Skip to content
cve — cve-2026-107441

grep -rl "CVE-2026-107441" ./articles

CVE-2026-107441

Attacks on about 1,000 Zyxel switches were blamed on a flaw patched in June. Binarly found the exploit uses a different one that still works on patched firmware. The wrong CVE is in the federal catalogue and the right one is not.

1 article — 2026-11-09
NOT IN CISA KEV — CATALOG 2026.11.06

Authoritative record

Root Notes reports on this identifier; it does not maintain it. For the vendor advisory, the affected versions and the scoring, NVD and MITRE hold the primary records.

Not listed in CISA's Known Exploited Vulnerabilities catalog as of catalog 2026.11.06. That is not evidence it is not being exploited — the catalog records what CISA has confirmed, and identifiers have been attacked for days before appearing in it.

Our coverage

The catalogue told agencies to patch the wrong Zyxel flaw

2026-11-09Security

Attacks on about 1,000 Zyxel switches were blamed on a flaw patched in June. Binarly found the exploit uses a different one that still works on patched firmware. The wrong CVE is in the federal catalogue and the right one is not.

../cve — every identifier we have covered