https://reddit.com/r/cybersecurity/comments/1vq55rw/cve20266837_root_command_injection_affecting_18/: CVE-2026-6837: Root Command Injection Affecting 18 Zyxel Access Point Models

Published Aug 16, 2026

Updated

Affected Software

1 affected component

Zyxel Access Point models (certificate export functionality)

CVE-2026-6837 is rated as a critical severity vulnerability due to its potential for unauthorized command execution.

To fix CVE-2026-6837, update to the latest firmware version provided by Zyxel that addresses this vulnerability.

CVE-2026-6837 affects 18 Zyxel Access Point models, including the WAX650S.

CVE-2026-6837 is an authenticated command injection vulnerability in Zyxel's certificate export functionality.

CVE-2026-6837 was published on August 16, 2026.