Security News Hackers exploit critical unpatched flaw in Zyxel CPE devices BleepingComputer Daniel Bender Jan 29, 2025 Hackers are exploiting a critical command injection vulnerability in Zyxel CPE Series devices that is currently tracked as CVE-2024-40891 and remains unpatched since last July.