CVE-2026-13206CWE-78command-injection

CVE-2026-13206

Critical · published August 10, 2026

CVSS v3.1
9.8
EPSS
2%
Percentile
77.9
In the wild
Unconfirmed
What it is

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zyxel Networks WAH7601 allows OS Command Injection.

This issue affects WAH7601: through 20072026.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01767 · 77.9th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-08-10T17:17Z
References (1)
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0799 · [email protected]
EPSS history
Timeline
  • 10 AUG 12:25Z
    Multiple Vulnerabilities in Zyxel's WAH7601 - OS Command Injection
    cvelistv5