Will Zyxel GS1900 zero-day lead to 10,000+ compromised devices by Dec 2026?

Zyxel has patched a zero-day in GS1900 network switches that was exploited to compromise nearly 1,000 devices globally and steal credentials (Bleeping Computer). The question is whether the exploitation campaign will expand significantly before year-end.

Resolution Criteria

Confirmed by Zyxel advisory, CISA alerts, or reputable security research reports documenting total devices compromised or exploited incidents attributed to this CVE by Dec 31, 2026.