CVE-2026-6374

HighCVSS 7.3

Published: 10/08/2026(UTC)Updated: 26/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable. This issue affects WAH7601 through 20.07.2026.

Risk Assessment

An attacker can access sensitive data such as passwords or keys, potentially leading to unauthorized access to the device.

Recommendation

Update the WAH7601 firmware to a patched version. Remove hard-coded credentials and use secure secret storage mechanisms.

Original NVD description (English source)

Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable. This issue affects WAH7601: through 20.07.2026.