CVE-2026-13206

CVSS 9.8 (critical) · published 2026-08-10

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zyxel Networks WAH7601 allows OS Command Injection. This issue affects WAH7601: through 20072026.

Weakness: CWE-78

Source: NVD CVE-2026-13206

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0799

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.