CVE-2026-12984 PUBLISHED

Exposure of Sensitive Information to an Unauthorized Actor in Zyxel's WAH7601

Assigner: TR-CERT
Reserved: 23.06.2026 Published: 10.08.2026 Updated: 10.08.2026

Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data.

This issue affects WAH7601: through 20072026.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS Score: 8.2

Product Status

Vendor Zyxel Networks
Product WAH7601
Versions Default: unaffected
  • affected from 0 to 20072026 (incl.)

Credits

  • Hasan Egemen ERBAŞ finder

References

Problem Types

  • CWE-522 Insufficiently Protected Credentials CWE

Impacts

  • CAPEC-37 Retrieve Embedded Sensitive Data