CVE-2026-6373
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting.
Risk Assessment
An attacker can identify system and application details, facilitating further targeted attacks against the device.
Recommendation
Update the WAH7601 firmware to the latest version that includes a fix for this vulnerability.
Other vulnerabilities in Zyxel Networks WAH7601
See all- CVE-2026-13206Critical
Zyxel Networks WAH7601 through 20072026 has an OS command injection vulnerability that allows an attacker to execute arbitrary commands on the system.
- CVE-2026-6374High
Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable. This issue affects WAH7601 through 20.07.2026.
- CVE-2026-12984High
Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data. This issue affects WAH7601 through 20072026.
Original NVD description (English source)
Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting. This issue affects WAH7601: through 20072026.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS