#zyxel — Public Fediverse posts

I think I've found a way to mimic my #Synology guest WiFi network password rotation as I retire the units for newer #Zyxel APs. It involves ssh, a cron job, and very likely expect (!!!) of all things, to login to each AP, run a few commands, and set a random password. Emailing it to me or making a QR code somewhere is a later problem to solve. Won't use the cloud management platform, which might be easier. I just worry about wearing out the flash.

I think I've found a way to mimic my #Synology guest WiFi network password rotation as I retire the units for newer #Zyxel APs. It involves ssh, a cron job, and very likely expect (!!!) of all things, to login to each AP, run a few commands, and set a random password. Emailing it to me or making a QR code somewhere is a later problem to solve. Won't use the cloud management platform, which might be easier. I just worry about wearing out the flash.

I think I've found a way to mimic my #Synology guest WiFi network password rotation as I retire the units for newer #Zyxel APs. It involves ssh, a cron job, and very likely expect (!!!) of all things, to login to each AP, run a few commands, and set a random password. Emailing it to me or making a QR code somewhere is a later problem to solve. Won't use the cloud management platform, which might be easier. I just worry about wearing out the flash.

I think I've found a way to mimic my #Synology guest WiFi network password rotation as I retire the units for newer #Zyxel APs. It involves ssh, a cron job, and very likely expect (!!!) of all things, to login to each AP, run a few commands, and set a random password. Emailing it to me or making a QR code somewhere is a later problem to solve. Won't use the cloud management platform, which might be easier. I just worry about wearing out the flash.

I think I've found a way to mimic my #Synology guest WiFi network password rotation as I retire the units for newer #Zyxel APs. It involves ssh, a cron job, and very likely expect (!!!) of all things, to login to each AP, run a few commands, and set a random password. Emailing it to me or making a QR code somewhere is a later problem to solve. Won't use the cloud management platform, which might be easier. I just worry about wearing out the flash.

Chinese hackers exploit #WordPress, #Zyxel flaws to steal govt data

https://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-multiple-technologies-to-steal-govt-data/

#cybersecurity #China #PANOS #FlowiseAI #Nuclio #Proxmox #Ubiquity

Chinese hackers exploit #WordPress, #Zyxel flaws to steal govt data

https://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-multiple-technologies-to-steal-govt-data/

#cybersecurity #China #PANOS #FlowiseAI #Nuclio #Proxmox #Ubiquity

Chinese hackers exploit #WordPress, #Zyxel flaws to steal govt data

https://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-multiple-technologies-to-steal-govt-data/

#cybersecurity #China #PANOS #FlowiseAI #Nuclio #Proxmox #Ubiquity

Chinese hackers exploit #WordPress, #Zyxel flaws to steal govt data

https://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-multiple-technologies-to-steal-govt-data/

#cybersecurity #China #PANOS #FlowiseAI #Nuclio #Proxmox #Ubiquity

Chinese hackers exploit #WordPress, #Zyxel flaws to steal govt data

https://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-multiple-technologies-to-steal-govt-data/

#cybersecurity #China #PANOS #FlowiseAI #Nuclio #Proxmox #Ubiquity

#CISA orders feds to patch #Zyxel flaw exploited for data theft

https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-zyxel-flaw-by-thursday/

#cybersecurity

#CISA orders feds to patch #Zyxel flaw exploited for data theft

https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-zyxel-flaw-by-thursday/

#cybersecurity

#CISA orders feds to patch #Zyxel flaw exploited for data theft

https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-zyxel-flaw-by-thursday/

#cybersecurity

#CISA orders feds to patch #Zyxel flaw exploited for data theft

https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-zyxel-flaw-by-thursday/

#cybersecurity

#CISA orders feds to patch #Zyxel flaw exploited for data theft

https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-zyxel-flaw-by-thursday/

#cybersecurity

Chinese hackers exploit flaws in WordPress, Zyxel to steal government data

In a massive cyberattack, hackers exploited vulnerabilities in WordPress and Zyxel to steal sensitive government data from 996 devices across 48 countries. The breach exposed device configurations, network info, and critical credentials, with one Western government organization losing over 18,000 records, including accounts and…

https://osintsights.com/chinese-hackers-exploit-flaws-in-wordpress-zyxel-to-steal-government-data?utm_source=mastodon&utm_medium=social

#ChineseHackers #NationState #SupplyChain #Zyxel #Wordpress

Chinese hackers exploit flaws in WordPress, Zyxel to steal government data

In a massive cyberattack, hackers exploited vulnerabilities in WordPress and Zyxel to steal sensitive government data from 996 devices across 48 countries. The breach exposed device configurations, network info, and critical credentials, with one Western government organization losing over 18,000 records, including accounts and…

https://osintsights.com/chinese-hackers-exploit-flaws-in-wordpress-zyxel-to-steal-government-data?utm_source=mastodon&utm_medium=social

#ChineseHackers #NationState #SupplyChain #Zyxel #Wordpress

📢 Un acteur chinois vole 18 000 dossiers gouvernementaux via WordPress et exploite ZyXEL GS1900

Ce rapport documente l'activité d'un acteur malveillant cybernétique (MCA) suivi depuis juin 2026 via le Global Observation Grid (GOG) de GreyNoise. L'acteur est suspecté d'être sinophone, opérant en UTC+8, et est relié au groupe "Red Heron" précédemment rapporté…

📖 cyberveille : https://cyberveille.ch/posts/2026-09-22-un-acteur-chinois-vole-18-000-dossiers-gouvernementaux-via-wordpress-et-exploite-zyxel-gs1900/
🌐 source : https://www.greynoise.io/blog/open-season-on-kapibala-attacker-steals-government-records-wordpress-exploitation#:~:text=GreyNoise%20discovered%20the%20MCA%20targeted%20ZyXEL%20GS1900%20Smart%20Managed%20Switches%20globally
🟢 vérification factuelle haute
#WordPress #ZyXEL #Cyberveille

CISA added CVE-2026-7273, a stack-based buffer overflow in Zyxel GS1900 CGI handling, to KEV on Sept 21, 2026 after confirmed active exploitation. Unauthenticated LAN HTTP requests can yield OS command execution, risking switch takeover and lateral movement. #Zyxel #KnownExploitedVulnerabilities #NetworkSecurity

https://cyberworldops.eu/en/actively-exploited-zyxel-switch-flaw-triggers-three-day-federal-patch

CISA added CVE-2026-7273, a stack-based buffer overflow in Zyxel GS1900 CGI handling, to KEV on Sept 21, 2026 after confirmed active exploitation. Unauthenticated LAN HTTP requests can yield OS command execution, risking switch takeover and lateral movement. #Zyxel #KnownExploitedVulnerabilities #NetworkSecurity

https://cyberworldops.eu/en/actively-exploited-zyxel-switch-flaw-triggers-three-day-federal-patch

CISA added CVE-2026-7273, a stack-based buffer overflow in Zyxel GS1900 CGI handling, to KEV on Sept 21, 2026 after confirmed active exploitation. Unauthenticated LAN HTTP requests can yield OS command execution, risking switch takeover and lateral movement. #Zyxel #KnownExploitedVulnerabilities #NetworkSecurity

https://cyberworldops.eu/en/actively-exploited-zyxel-switch-flaw-triggers-three-day-federal-patch

Zyxel GS1900 switches (CVE-2026-7273) and Veeam Agent for Microsoft Windows (CVE-2026-32996) are under active exploitation. The former allows unauthenticated LAN command execution via CGI buffer overflow, the latter enables SYSTEM-level access on endpoints. Both expand persistence and backup tampering risk. #Zyxel #Veeam #ThreatIntel #VulnManagement

https://cyberworldops.eu/en/active-attacks-put-zyxel-switches-and-veeam-protected-windows

Zyxel GS1900 switches (CVE-2026-7273) and Veeam Agent for Microsoft Windows (CVE-2026-32996) are under active exploitation. The former allows unauthenticated LAN command execution via CGI buffer overflow, the latter enables SYSTEM-level access on endpoints. Both expand persistence and backup tampering risk. #Zyxel #Veeam #ThreatIntel #VulnManagement

https://cyberworldops.eu/en/active-attacks-put-zyxel-switches-and-veeam-protected-windows

CISA Flags Active Exploitation of Zyxel, Veeam Flaws

The US Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm on a high-severity Zyxel vulnerability, warning that hackers are actively exploiting it to gain control of unpatched GS1900 series switches. This critical flaw, now patched, has a CVSS score of 8.8 and could allow attackers to execute malicious OS commands via a simple…

https://osintsights.com/cisa-flags-active-exploitation-of-zyxel-veeam-flaws?utm_source=mastodon&utm_medium=social

#Zyxel #Veeam #Cve20267273 #Cisa #KnownExploitedVulnerabilities

CISA warned of an exploited Zyxel switch vulnerability in GS1900 devices. Patch the Zyxel switch vulnerability now to prevent network compromise.

#Zyxel #CVE20267273 #CISAKEV #BufferOverflow #NetworkSecurity #Infosec

https://securityonline.info/exploited-zyxel-switch-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

CISA warned of an exploited Zyxel switch vulnerability in GS1900 devices. Patch the Zyxel switch vulnerability now to prevent network compromise.

#Zyxel #CVE20267273 #CISAKEV #BufferOverflow #NetworkSecurity #Infosec

https://securityonline.info/exploited-zyxel-switch-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

CISA warned of an exploited Zyxel switch vulnerability in GS1900 devices. Patch the Zyxel switch vulnerability now to prevent network compromise.

#Zyxel #CVE20267273 #CISAKEV #BufferOverflow #NetworkSecurity #Infosec

https://securityonline.info/exploited-zyxel-switch-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

CISA warned of an exploited Zyxel switch vulnerability in GS1900 devices. Patch the Zyxel switch vulnerability now to prevent network compromise.

#Zyxel #CVE20267273 #CISAKEV #BufferOverflow #NetworkSecurity #Infosec

https://securityonline.info/exploited-zyxel-switch-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

CVE Alert: CVE-2026-7273 - Zyxel - GS1900-48HPv2 firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-7273-zyxel-gs1900-48hpv2-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-7273 #zyxel #gs1900-48hpv2-firmware

CVE Alert: CVE-2026-7273 - Zyxel - GS1900-48HPv2 firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-7273-zyxel-gs1900-48hpv2-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-7273 #zyxel #gs1900-48hpv2-firmware

CVE Alert: CVE-2026-7273 - Zyxel - GS1900-48HPv2 firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-7273-zyxel-gs1900-48hpv2-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-7273 #zyxel #gs1900-48hpv2-firmware

CVE Alert: CVE-2026-7273 - Zyxel - GS1900-48HPv2 firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-7273-zyxel-gs1900-48hpv2-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-7273 #zyxel #gs1900-48hpv2-firmware

CVE Alert: CVE-2026-7273 - Zyxel - GS1900-48HPv2 firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-7273-zyxel-gs1900-48hpv2-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-7273 #zyxel #gs1900-48hpv2-firmware

Сегодня звёзды сошлись и я... Настроил vlan'ы, транк, связал со старым длинком, подключился первого абонента - Orange Pi5.
Работает!
А после обновления прошивки заработал нормально ssh, да и красивостей прибавилось.
#zyxel #xgs1930

Сегодня звёзды сошлись и я... Настроил vlan'ы, транк, связал со старым длинком, подключился первого абонента - Orange Pi5.
Работает!
А после обновления прошивки заработал нормально ssh, да и красивостей прибавилось.
#zyxel #xgs1930

Сегодня звёзды сошлись и я... Настроил vlan'ы, транк, связал со старым длинком, подключился первого абонента - Orange Pi5.
Работает!
А после обновления прошивки заработал нормально ssh, да и красивостей прибавилось.
#zyxel #xgs1930

Zyxel: 70 CVEs, 100% unpatched. 3 CISA KEV exploited. Max CVSS 9.8. Trust Score: D. Networking gear = easy target. Patch NOW. #Zyxel #infosec #cybersecurity

https://www.valtersit.com/vendors/zyxel/

Zyxel: 70 CVEs, 100% unpatched. 3 CISA KEV exploited. Max CVSS 9.8. Trust Score: D. Networking gear = easy target. Patch NOW. #Zyxel #infosec #cybersecurity

https://www.valtersit.com/vendors/zyxel/

Zyxel: 70 CVEs, 100% unpatched. 3 CISA KEV exploited. Max CVSS 9.8. Trust Score: D. Networking gear = easy target. Patch NOW. #Zyxel #infosec #cybersecurity

https://www.valtersit.com/vendors/zyxel/

CVE-2026-13206: CRITICAL OS command injection in Zyxel WAH7601 (≤20072026). Remote, unauthenticated code execution possible — no patch yet. Restrict access & monitor vendor updates. Details: https://radar.offseq.com/threat/cve-2026-13206-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-16288f4bcb3de542 #OffSeq #CVE #Zyxel #Vuln #InfoSec

CVE-2026-13206: CRITICAL OS command injection in Zyxel WAH7601 (≤20072026). Remote, unauthenticated code execution possible — no patch yet. Restrict access & monitor vendor updates. Details: https://radar.offseq.com/threat/cve-2026-13206-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-16288f4bcb3de542 #OffSeq #CVE #Zyxel #Vuln #InfoSec

CVE-2026-13206: CRITICAL OS command injection in Zyxel WAH7601 (≤20072026). Remote, unauthenticated code execution possible — no patch yet. Restrict access & monitor vendor updates. Details: https://radar.offseq.com/threat/cve-2026-13206-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-16288f4bcb3de542 #OffSeq #CVE #Zyxel #Vuln #InfoSec

CVE-2026-13206: CRITICAL OS command injection in Zyxel WAH7601 (≤20072026). Remote, unauthenticated code execution possible — no patch yet. Restrict access & monitor vendor updates. Details: https://radar.offseq.com/threat/cve-2026-13206-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-16288f4bcb3de542 #OffSeq #CVE #Zyxel #Vuln #InfoSec

Status meiner Internetzugangsbeziehung: Es ist unkompliziert 😁.
#Glasfaser bei der #Telekom bestellt. Techniker hat Kabel vom Keller in die Wohnung gezogen. Habe das "Telekom" #Glasfasermodem von #Zyxel in den #SFP Slot meines #tplink #vx800v gesteckt, das Modem über den Einrichtungslink der Telekom registriert und... es ging auf Anhieb!! 🕺😎

Status meiner Internetzugangsbeziehung: Es ist unkompliziert 😁.
#Glasfaser bei der #Telekom bestellt. Techniker hat Kabel vom Keller in die Wohnung gezogen. Habe das "Telekom" #Glasfasermodem von #Zyxel in den #SFP Slot meines #tplink #vx800v gesteckt, das Modem über den Einrichtungslink der Telekom registriert und... es ging auf Anhieb!! 🕺😎

Status meiner Internetzugangsbeziehung: Es ist unkompliziert 😁.
#Glasfaser bei der #Telekom bestellt. Techniker hat Kabel vom Keller in die Wohnung gezogen. Habe das "Telekom" #Glasfasermodem von #Zyxel in den #SFP Slot meines #tplink #vx800v gesteckt, das Modem über den Einrichtungslink der Telekom registriert und... es ging auf Anhieb!! 🕺😎

Just found out, that acme.sh supports deploying certs to zyxel gs1900 switches AND opnsense supports it as automation 😎
Proxmox, truenas are supported too, but I do have processes for these hosts already.
#acmesh #opnsense #zyxel #gs1900 #httpseverwhere

Just found out, that acme.sh supports deploying certs to zyxel gs1900 switches AND opnsense supports it as automation 😎
Proxmox, truenas are supported too, but I do have processes for these hosts already.
#acmesh #opnsense #zyxel #gs1900 #httpseverwhere

CVE Alert: CVE-2026-6837 - Zyxel - WAX650S firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-6837-zyxel-wax650s-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-6837 #zyxel #wax650s-firmware

CVE Alert: CVE-2026-14818 - Zyxel - ATP series firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-14818-zyxel-atp-series-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-14818 #zyxel #atp-series-firmware

CVE Alert: CVE-2026-6837 - Zyxel - WAX650S firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-6837-zyxel-wax650s-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-6837 #zyxel #wax650s-firmware

CVE Alert: CVE-2026-14818 - Zyxel - ATP series firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-14818-zyxel-atp-series-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-14818 #zyxel #atp-series-firmware

CVE Alert: CVE-2026-6837 - Zyxel - WAX650S firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-6837-zyxel-wax650s-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-6837 #zyxel #wax650s-firmware

CVE Alert: CVE-2026-14818 - Zyxel - ATP series firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-14818-zyxel-atp-series-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-14818 #zyxel #atp-series-firmware

CVE Alert: CVE-2026-6837 - Zyxel - WAX650S firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-6837-zyxel-wax650s-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-6837 #zyxel #wax650s-firmware

CVE Alert: CVE-2026-14818 - Zyxel - ATP series firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-14818-zyxel-atp-series-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-14818 #zyxel #atp-series-firmware

CVE Alert: CVE-2026-6837 - Zyxel - WAX650S firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-6837-zyxel-wax650s-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-6837 #zyxel #wax650s-firmware

CVE Alert: CVE-2026-14818 - Zyxel - ATP series firmware - https://www.redpacketsecurity.com/cve-alert-cve-2026-14818-zyxel-atp-series-firmware/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-14818 #zyxel #atp-series-firmware

CVE-2026-6837 - Post-auth command injection in Zyxel WAX650S export-cgi. Admin RCE. CVSS 7.2. Unpatched - restrict admin access now. #CVE #Zyxel #infosec

https://www.valtersit.com/cve/CVE-2026-6837/

CVE-2026-6837 - Post-auth command injection in Zyxel WAX650S export-cgi. Admin RCE. CVSS 7.2. Unpatched - restrict admin access now. #CVE #Zyxel #infosec

https://www.valtersit.com/cve/CVE-2026-6837/