CVE-2026-13206: Multiple Vulnerabilities in Zyxel's WAH7601 - OS Command Injection
Published Aug 10, 2026
·Updated
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zyxel Networks WAH7601 allows OS Command Injection.
This issue affects WAH7601: through 20072026.
Affected Software
1 affected component
Zyxel Networks WAH7601<=20072026
Event History
Aug 10, 2026
CVE Published
via MITRE·12:25 PM
Data Sourced
via MITRE·12:25 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-13206?
CVE-2026-13206 has a severity score of 9.8, categorizing it as critical.
2
How do I fix CVE-2026-13206?
To mitigate CVE-2026-13206, ensure that your Zyxel WAH7601 firmware is updated to the latest version provided by Zyxel.
3
What systems are affected by CVE-2026-13206?
CVE-2026-13206 affects the Zyxel Networks WAH7601 device model.
4
What type of vulnerability is CVE-2026-13206?
CVE-2026-13206 is classified as an OS command injection vulnerability.
5
When was CVE-2026-13206 published?
CVE-2026-13206 was published on August 10, 2026.