CVE-2026-12984: Exposure of Sensitive Information to an Unauthorized Actor in Zyxel's WAH7601
Published Aug 10, 2026
·Updated
Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data.
This issue affects WAH7601: through 20072026.
Affected Software
1 affected component
Zyxel WAH7601<=20072026
Event History
Aug 10, 2026
CVE Published
via MITRE·12:37 PM
Data Sourced
via MITRE·12:37 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-12984?
The severity of CVE-2026-12984 is rated as high with a score of 8.2.
2
What type of vulnerability is CVE-2026-12984?
CVE-2026-12984 is classified as an Insufficiently Protected Credentials vulnerability.
3
What devices are affected by CVE-2026-12984?
CVE-2026-12984 affects Zyxel Networks WAH7601 devices manufactured up to the year 20072026.
4
How does CVE-2026-12984 expose sensitive information?
CVE-2026-12984 allows unauthorized actors to retrieve embedded sensitive data due to insufficient protection.
5
How can I mitigate the risks associated with CVE-2026-12984?
To mitigate risks from CVE-2026-12984, ensure to apply any available firmware updates and restrict access to affected devices.