CVE-2026-6837 in WAX650Sinfo

Zusammenfassung

von MITRE • 04.08.2026

A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Zuständig

Zyxel

Reservieren

22.04.2026

Veröffentlichung

04.08.2026

Moderieren

akzeptiert

Eintrag

VDB-385742

CPE

bereit

EPSS

0.00000

KEV

nein

Aktivitäten

very low

Quellen

Interested in the pricing of exploits?

See the underground prices here!