OS Command Injection Vulnerability in Zyxel Networks WAH7601
CVE-2026-13206

9.8CRITICAL

Key Information:

Vendor

Zyxel Networks

Status
Wah7601
Vendor
CVE Published:
10 August 2026

What is CVE-2026-13206?

An OS command injection vulnerability exists in Zyxel Networks WAH7601, allowing attackers to execute arbitrary OS commands via specially crafted input. This flaw can potentially lead to unauthorized access and exploitation of the affected device. Users are advised to update their systems to mitigate this vulnerability.

Affected Version(s)

WAH7601 0 <= 20072026

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Hasan Egemen ERBAĹž
.