CVE-2026-6374
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable. This issue affects WAH7601 through 20.07.2026.
Risk Assessment
An attacker can access sensitive data such as passwords or keys, potentially leading to unauthorized access to the device.
Recommendation
Update the WAH7601 firmware to a patched version. Remove hard-coded credentials and use secure secret storage mechanisms.
Other vulnerabilities in Zyxel Networks WAH7601
See all- CVE-2026-13206Critical
Zyxel Networks WAH7601 through 20072026 has an OS command injection vulnerability that allows an attacker to execute arbitrary commands on the system.
- CVE-2026-6373Medium
Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting.
- CVE-2026-12984High
Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data. This issue affects WAH7601 through 20072026.
Original NVD description (English source)
Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable. This issue affects WAH7601: through 20.07.2026.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS