Active Exploitation of Zero-day Zyxel CPE Vulnerability Spotted

The vulnerability in question is CVE-2024-40891, a critical command injection vulnerability that has neither been publicly disclosed nor patched. The bug was first reported by VulnCheck in July 2024.