CVE-2026-12984
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data. This issue affects WAH7601 through 20072026.
Risk Assessment
An attacker can access sensitive data such as passwords or keys, potentially leading to unauthorized access to the device.
Recommendation
Update the WAH7601 firmware to a patched version. Apply stronger credential protection mechanisms.
Other vulnerabilities in Zyxel Networks WAH7601
See all- CVE-2026-13206Critical
Zyxel Networks WAH7601 through 20072026 has an OS command injection vulnerability that allows an attacker to execute arbitrary commands on the system.
- CVE-2026-6374High
Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable. This issue affects WAH7601 through 20.07.2026.
- CVE-2026-6373Medium
Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting.
Original NVD description (English source)
Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data. This issue affects WAH7601: through 20072026.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS