CVE-2026-12984
Received Received - Intake

Insufficiently Protected Credentials in Zyxel WAH7601

Vulnerability report for CVE-2026-12984, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description

Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data. This issue affects WAH7601: through 20072026.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
zyxel wah7601 to 20072026 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-522 The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves insufficient protection of credentials in Zyxel Networks WAH7601 devices. It allows attackers to retrieve embedded sensitive data from the device.

Impact Analysis

An attacker could exploit this to access sensitive information stored on the device, potentially leading to data breaches or unauthorized access to network resources.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA due to unauthorized access to sensitive data, resulting in potential legal and regulatory penalties.

Mitigation Strategies

Update the Zyxel WAH7601 firmware to the latest version to address the insufficiently protected credentials issue. Disable remote access if not required and change default credentials to strong, unique passwords.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-12984. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart