Hardcoded Credentials in Zyxel WAH7601 Router

Description

Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable. This issue affects WAH7601: through 20.07.2026.

Affected Products

Vendor	Product	Versions
zyxel	wah7601	0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0799(government-resource)

Related News (1 articles)

Tier C

VulDB2d ago

CVE-2026-6374 | Zyxel WAH7601 up to 20.07.2026 hard-coded credentials

→ No new info (linked only)

CVSS 3.17.3 HIGH

VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CISA KEV❌ No

Actively exploited❌ No

CWECWE-798

PublishedAug 10, 2026

Last enriched2d ago

Trending Score23

Source articles1

Independent1

Info Completeness5/14

Missing: vendor, product, versions, epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

CRITICALCVE-2026-13206

Multiple Vulnerabilities in Zyxel's WAH7601 - OS Command Injection

Trending: 33

HIGHCVE-2026-12984

Exposure of Sensitive Information to an Unauthorized Actor in Zyxel's WAH7601

Trending: 27

MEDIUMCVE-2026-6373

Sensitive Data Exposure in Zyxel WAH7601 Router

Trending: 15

HIGHCVE-2026-14818

CVE-2026-14818: A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versi

Trending: 15

HIGHCVE-2026-6837

CVE-2026-6837: A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions

Trending: 10

Pin to Dashboard

Verification

State: verified

Confidence: 100%

Vulnerability Timeline

CVE Published

Aug 10, 2026

Discovered by ZDM

Aug 10, 2026