Hardcoded Credentials in Zyxel WAH7601 Router

Description

Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable. This issue affects WAH7601: through 20.07.2026.

Affected Products

Vendor	Product	Versions
zyxel	wah7601	0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0799(government-resource)

Related News (1 articles)

Tier C

VulDB48d ago

CVE-2026-6374 | Zyxel WAH7601 up to 20.07.2026 hard-coded credentials

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.17.3 HIGH

VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CISA KEV❌ No

Actively exploited❌ No

CWECWE-798

PublishedAug 10, 2026

Last enriched48d ago

Trending Score0

Source articles1

Independent1

Info Completeness5/14

Missing: vendor, product, versions, epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

MEDIUMCVE-2026-8508

CVE-2026-8508: An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions throug

Trending: 2

HIGHCVE-2026-6837

CVE-2026-6837: A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions

Trending: 1

HIGHCVE-2026-14818

CVE-2026-14818: A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versi

CRITICALCVE-2026-13206

Multiple Vulnerabilities in Zyxel's WAH7601 - OS Command Injection

HIGHCVE-2026-6952

CVE-2026-6952: A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-B

Pin to Dashboard

Verification

State: verified

Confidence: 100%

Vulnerability Timeline

CVE Published

Aug 10, 2026

Discovered by ZDM

Aug 10, 2026