Unpatched Zyxel CPE Zero-Day Pummeled by Cyberattackers
Posted on
VulnCheck initially disclosed the critical command-injection vulnerability (CVE-2024-40891) six months ago, but Zyxel has yet to mention its existence or offer users a patch to mitigate threats.
The US administration has banned [https://www.bis.gov/press-release/commerce-department-prohibits-russian-kaspersky-software-us-customers] Kaspersky, a Russian cybersecurity…