CVE-2026-13206

CriticalCVSS 9.8

Published: 10/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Summary

Zyxel Networks WAH7601 through 20072026 has an OS command injection vulnerability that allows an attacker to execute arbitrary commands on the system.

Risk Assessment

An attacker can take control of the device, potentially leading to network compromise and further attacks.

Recommendation

Update the device firmware to the latest available version that includes a fix.

Original NVD description (English source)

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zyxel Networks WAH7601 allows OS Command Injection. This issue affects WAH7601: through 20072026.