Exposure of Sensitive Information to an Unauthorized Actor in Zyxel's WAH7601

Description

Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data. This issue affects WAH7601: through 20072026.

Affected Products

Vendor	Product	Versions
zyxel	wah7601	0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0799(government-resource)

Related News (1 articles)

Tier C

VulDB66d ago

CVE-2026-12984 | Zyxel WAH7601 up to 20072026 information disclosure

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.18.2 HIGH

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

CISA KEV❌ No

Actively exploited❌ No

CWECWE-522

PublishedAug 10, 2026

Trending Score0

Source articles1

Independent1

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-14818

CVE-2026-14818: A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versi

CRITICALCVE-2026-13206

Multiple Vulnerabilities in Zyxel's WAH7601 - OS Command Injection

HIGHCVE-2026-6374

Hardcoded Credentials in Zyxel WAH7601 Router

MEDIUMCVE-2026-8508

CVE-2026-8508: An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions throug

HIGHCVE-2026-6952

CVE-2026-6952: A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-B

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Aug 10, 2026

Discovered by ZDM

Aug 10, 2026