Zyxel Networks vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Zyxel Networks products: 4 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-6374 High · 7.3 CWE-798 Aug 10, 2026

Hardcoded Credentials in Zyxel WAH7601 Router

Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable. This issue affects WAH7601: through 20.07.2026.

CVE-2026-6373 Medium · 6.5 CWE-497 Aug 10, 2026

Sensitive Data Exposure in Zyxel WAH7601 Router

Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting. This issue affects WAH7601: through 20072026.

CVE-2026-13206 Critical · 9.8 CWE-78 Aug 10, 2026

Multiple Vulnerabilities in Zyxel's WAH7601 - OS Command Injection

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zyxel Networks WAH7601 allows OS Command Injection. This issue affects WAH7601: through 20072026.

CVE-2026-12984 High · 8.2 CWE-522 Aug 10, 2026

Exposure of Sensitive Information to an Unauthorized Actor in Zyxel's WAH7601

Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data. This issue affects WAH7601: through 20072026.