# Zyxel Networks cybersecurity and product developments

> Developing situation record from CLSTR: https://clstr.news/situations/zyxel-networks-cybersecurity-and-product-developments
> Updated: 2026-11-05T00:00:00.000Z. Sources: 5. Developments: 2.

In October 2026, Zyxel Networks launched a cybersecurity campaign and a new series of XS1935 smart managed multi-gigabit 10G Lite-L3 switches. This initiative was intended to assist small and medium-sized enterprises with high-performance networking and simplified security management.

By November 2026, the company released firmware updates to patch a zero-day vulnerability, identified as CVE-2026-107441, affecting ten models of GS1900 network switches. The flaw, which carries a CVSS score of 8.8, allowed unauthenticated attackers to execute operating system commands via the web management interface. Security researchers reported that attackers had been exploiting these switches since mid-August, targeting nearly 1,000 devices across 48 countries to collect network information and hashed root credentials.

Reports indicate that a cyber threat group identified as Kapibala exploited this vulnerability to compromise 996 devices. The campaign targeted various small to medium-sized enterprises, such as schools, hotels, and offices. In at least 564 cases, attackers successfully exploited devices that were still using factory default passwords. While a previous patch had been issued in June, the new exploit targeted a different aspect of the management component, allowing remote attackers to execute arbitrary code via specially crafted HTTP requests.

## Timeline

### 2026-11-05: Zyxel patches zero-day vulnerability in GS1900 series switches

Zyxel has patched a critical zero-day vulnerability in its GS1900 switches after attackers compromised nearly 1,000 devices globally to steal credentials and network configurations.

5 sources. https://clstr.news/cluster/zyxel-patches-zero-day-vulnerability-in-gs1900-network-switches

### 2026-10-09: Zyxel Networks launches cybersecurity campaign and 10G switch series

Zyxel Networks is expanding its support for SMEs through a new cybersecurity initiative for IT partners and the launch of the XS1935 series of 10G smart managed switches.

2 sources. https://clstr.news/cluster/zyxel-networks-launches-cybersecurity-campaign-and-10g-switch-series

---
Cite as: Zyxel Networks cybersecurity and product developments. CLSTR, https://clstr.news/situations/zyxel-networks-cybersecurity-and-product-developments