AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-13206

CRITICAL · CVSS 9.8 EPSS 1.27%

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The Zyxel Networks WAH7601 is vulnerable to OS command injection due to improper neutralization of special elements in OS commands, allowing attackers to execute arbitrary commands on the affected device. This critical vulnerability, with a CVSS score of 9.8, poses a significant risk as it could lead to unauthorized access and control over the device. Organizations using the WAH7601 should prioritize immediate remediation to mitigate potential exploitation.

CVE
CVE-2026-13206
Severity
CRITICAL
CVSS
9.8
EPSS
1.27%

Original NVD Description

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zyxel Networks WAH7601 allows OS Command Injection. This issue affects WAH7601: through 20072026.