zyxel gs1900-24hpv2 firmware

Name: zyxel gs1900-24hpv2 firmware
Brand: zyxel

productUS

cpe:2.3:o:zyxel:gs1900-24hpv2_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

public exploit

EPSS ≥ 10%

critical

by severity

0critical2high4medium0low

updated 2026-10-28

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-7273US	—OT critical	2.78% (86th)	KEV	2.90\(abtp.2\)c0	2026-06-16	< 2.90\(abtp.2\)c0
CVE-2024-8881US	—	0.70% (53rd)	—	2.90\(abtp.0\)c0	2024-11-12	< 2.90\(abtp.0\)c0
CVE-2021-35031US	high8.0	0.48% (41st)	—	2.70\(aatp.0\)-20211208	2021-12-28	< 2.70\(aatp.0\)-20211208
CVE-2022-34746US	medium5.9	0.38% (32nd)	—	2.70\(abtp.3\)c0	2022-09-20	< 2.70\(abtp.3\)c0
CVE-2021-35030US	medium4.3	0.27% (19th)	—	2.70	2021-07-26	< 2.70
CVE-2024-8882US	—	0.24% (16th)	—	2.90\(abtp.0\)c0	2024-11-12	< 2.90\(abtp.0\)c0
CVE-2021-35032US	high7.8	0.22% (12th)	—	2.70\(aatp.0\)-20211208	2021-12-28	< 2.70\(aatp.0\)-20211208
CVE-2024-38270US	medium6.5	0.21% (11th)	—	2.80\(abtp.1\)c0	2024-09-10	< 2.80\(abtp.1\)c0
CVE-2023-35140US	—	0.17% (7th)	—	no fix	2023-11-07	≤ 2.70\(abtp.5\)
CVE-2022-45853US	medium6.7OT elevated	0.17% (6th)	—	no fix	2023-05-30	= 2.70(abtp.3)

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-331Insufficient Entropy2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-276Incorrect Default Permissions1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.