Multiple Vulnerabilities in Zyxel's WAH7601 - OS Command Injection

Description

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zyxel Networks WAH7601 allows OS Command Injection. This issue affects WAH7601: through 20072026.

Affected Products

Vendor	Product	Versions
zyxel	wah7601	0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0799(government-resource)

Related News (1 articles)

Tier C

VulDB2d ago

CVE-2026-13206 | Zyxel WAH7601 os command injection

→ No new info (linked only)

CVSS 3.19.8 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

CWECWE-78

PublishedAug 10, 2026

Trending Score33

Source articles1

Independent1

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-12984

Exposure of Sensitive Information to an Unauthorized Actor in Zyxel's WAH7601

Trending: 27

HIGHCVE-2026-6374

Hardcoded Credentials in Zyxel WAH7601 Router

Trending: 23

MEDIUMCVE-2026-6373

Sensitive Data Exposure in Zyxel WAH7601 Router

Trending: 15

HIGHCVE-2026-14818

CVE-2026-14818: A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versi

Trending: 15

HIGHCVE-2026-6837

CVE-2026-6837: A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions

Trending: 10

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Aug 10, 2026

Discovered by ZDM

Aug 10, 2026