CISA Flags Zyxel GS1900 Switch Flaw CVE-2026-7273 as Actively Exploited

·1 views

A critical stack-based buffer overflow vulnerability, CVE-2026-7273, affects multiple Zyxel GS1900 series managed switches, allowing an unauthenticated attacker on the local network to execute arbitrary OS commands via a crafted HTTP request to the web management interface. CISA added the flaw to its Known Exploited Vulnerabilities catalog on September 21, 2026, confirming active exploitation in the wild. Scored 8.8 out of 10 under CVSS 3.1, the vulnerability gives attackers control over VLAN configurations, port mirroring, routing, and stored credentials, effectively dismantling network segmentation. Ten GS1900 models running firmware version 2.90(x.1)C0 or earlier are affected, with Zyxel having released patched firmware (2.90(x.2)C0) for each. Administrators are urged to apply the fixed firmware immediately using download links provided in Zyxel's official security advisory.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

CSS Can Now Style Native Select Dropdowns Without JavaScript Rebuilds

Browsers are gaining support for a new CSS feature called 'customizable select,' which allows developers to fully style native HTML select dropdowns using the new 'appearance: base-select' value. Previously, the select element's popup was largely controlled by the operating system, forcing developers to rebuild the control in JavaScript to match custom designs. The new approach lets developers style the picker, options, arrow icon, and checkmark with CSS while retaining native form submission, keyboard interaction, and accessibility behavior. Chrome and Edge shipped support in version 135, and Safari followed with version 27 released on September 17, 2026, while Firefox support remains experimental and off by default. Developers are advised to treat the feature as progressive enhancement, ensuring unstyled, functional dropdowns still appear in unsupported browsers.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Seven Charts That Actually Diagnose Why a Metric Dropped

Most business dashboards are built to report numbers, not explain why they change, leaving analysts scrambling through exports and pivot tables when a KPI falls. A structured root cause analysis relies on seven specific chart types, each designed to answer one diagnostic question rather than display a trend. Tools like decomposition trees identify which segment is dragging a metric down, Pareto charts isolate the few causes that matter most, and waterfall charts reconstruct step-by-step changes between two points in time. Heatmaps pinpoint problematic combinations such as a specific region underperforming only on weekends, while scatter plots, box plots, and Sankey diagrams address correlation, hidden averages, and volume leakage respectively. Choosing the right chart depends on the diagnostic question being asked, not on data shape or personal familiarity with a chart type.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer builds unified Mac workspace layer for notes, tasks and focus tools

A developer created a macOS app called Optimal Desktop to streamline daily workflows without juggling multiple apps or browser tabs. The tool brings together notes, tasks, a calendar, and a focus timer into a single layer accessible via one keyboard shortcut. All data is stored locally on the user's machine, with no cloud sync or tracking involved. The project was born from the developer's desire for a faster, distraction-free workflow on macOS. The creator shared the idea on DEV Community seeking feedback on how others manage quick notes and daily productivity on Mac.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

CrestronHomeNUnit lets developers run identical NUnit tests on Windows and Crestron processors

A new open-source workflow called CrestronHomeNUnit, developed by Neil Colvin and GPT-6 Astra, allows developers to write a single set of NUnit tests and execute them on both Windows machines and Crestron Home control processors. Crestron Home processors run on a Mono runtime and control smart-home equipment such as lighting, heating, and media systems, and their environment can behave differently from a standard Windows development machine. The toolset includes three components: a Windows-based test runner, a Visual Studio Test Explorer adapter, and a C# developer library for processor management. Tests target .NET Framework 4.7.2 for the processor and .NET 10 for desktop, with C# 13 syntax supported but without exposing newer runtime APIs on the processor side. The workflow is designed to be adopted incrementally, allowing teams to start with local testing and add automated deployment or CI integration later.

0 comments Read more at DEV Community