CVE-2026-6374CWE-798hardcoded-credentials

CVE-2026-6374

High · published August 10, 2026

CVSS v3.1

7.3

EPSS

0%

Percentile

15.1

In the wild

Unconfirmed

What it is

Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable.

This issue affects WAH7601: through 20.07.2026.

The record

Technical detail

CVSS v3.1: 7.3 · HIGH
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0: Not supplied
EPSS: 0.00247 · 15.1th percentile
Weakness: CWE-798 · Use of Hard-coded Credentials
Published: 2026-08-10T17:20Z

References (1)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0799 · [email protected]

EPSS history

Timeline

10 AUG 12:15Z
Hardcoded Credentials in Zyxel WAH7601 Router
cvelistv5