What is the CVSS score of CVE-2026-12984?

CVE-2026-12984 has a CVSS 3.1 base score of 8.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N. EPSS exploitation probability: 0.3%.

Which versions of Zyxel WAH7601 are affected by CVE-2026-12984?

The Zyxel WAH7601 4G LTE mobile Wi-Fi router contains a critical credential exposure vulnerability accessible to unauthenticated remote attackers without user interaction, though no public exploit…

How to fix or mitigate CVE-2026-12984?

Within 24 hours, inventory all Zyxel WAH7601 devices and isolate them to restricted network segments with strict access controls limiting remote connections. Within 7 days, implement network monitoring to detect suspicious credential access patterns, disable remote management features where operationally feasible, and maintain a documented register of affected devices. Within 30 days, establish a hardware replacement plan to migrate away from vulnerable WAH7601 units, monitor Zyxel security advisories for eventual patch availability, and implement device inventory controls to prevent future deployment of unpatched models.

Zyxel WAH7601 CVE-2026-12984

EUVD-2026-55622 HIGH

Insufficiently Protected Credentials (CWE-522)

2026-08-10 iletisim@usom.gov.tr

GHSA-rv76-98qf-f5rh

Information Disclosure Zyxel

8.2

CVSS 3.1 · Vendor: usom

Severity by source

Vendor (usom) PRIMARY

8.2 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

vuln.today AI

6.5 MEDIUM

Attack vector assessed as Adjacent (AV:A) since WAH7601 is a hotspot device; management interface is primarily reachable by associated Wi-Fi clients, not arbitrary internet hosts. Integrity impact revised to None as credential retrieval itself does not modify data.

3.1 AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.0 AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (usom).

CVSS VectorVendor: usom

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 10, 2026 - 13:31 vuln.today

CVE Published

Aug 10, 2026 - 13:17 nvd

HIGH 8.2

DescriptionCVE.org

Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data.

This issue affects WAH7601: through 20072026.

AnalysisAI

Insufficiently protected credentials in the Zyxel WAH7601 4G LTE mobile Wi-Fi router expose sensitive embedded data to unauthenticated remote attackers. All firmware versions through 20072026 are affected, and the CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N) indicates trivial remote exploitation requiring no privileges or user interaction. No public exploit has been identified at time of analysis, and no CISA KEV listing is present, but the unauthenticated network-accessible nature of the flaw warrants prompt patching.

Technical ContextAI

CWE-522 (Insufficiently Protected Credentials) describes a class of flaw where credentials - such as admin passwords, Wi-Fi PSKs, ISP credentials, or API tokens - are stored or transmitted in a form that an attacker can retrieve without proper authorization controls. In embedded networking devices like the WAH7601, this most commonly manifests as credentials readable via an unprotected API endpoint, embedded in firmware images in cleartext, or exposed through the device management web interface without authentication. The WAH7601 is a Zyxel-branded 4G LTE mobile hotspot device providing shared internet access; its management interface and potential WAN-facing services constitute the network attack surface. The CPE data was not explicitly provided, but the affected product is identified as Zyxel WAH7601 running firmware versions up to and including 20072026 (a date-formatted firmware version string). The network attack vector (AV:N) in the provided CVSS vector is consistent with exploitation via a reachable management interface over LTE or local Wi-Fi, particularly if the device's admin panel is exposed to connected clients or the internet.

RemediationAI

Check the Zyxel security advisory portal for an updated firmware release for the WAH7601 that addresses this credential exposure. The provided reference (https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0799) should be consulted for any interim guidance from USOM. No exact patched firmware version was identified in the available data, so administrators should monitor Zyxel's official support pages. As a compensating control, restrict access to the WAH7601 management interface to trusted clients only by disabling remote/WAN-side admin access if the firmware supports this option - note this does not eliminate the vulnerability if credentials are still retrievable by local Wi-Fi clients. Changing any default or embedded credentials immediately after identifying the affected device is advisable; be aware this may not fully mitigate the flaw if the underlying retrieval mechanism bypasses authentication. Network segmentation of devices using WAH7601 hotspots limits blast radius if credentials are exfiltrated.