HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-6837 — A post-authentication command injection vulnerability in the "export-cgi" CGI pr...

·Source: NIST NVD

Updated:

Executive Summary

A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device.

Analysis

A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device. CVSS Score: 7.2. Published: 2026-08-04T03:16:25.890.

Indicators of Compromise (1)

CVE (1)
CVE-2026-6837
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 4, 2026. Verified by: NIST.

Related Threats

HIGHVulnerability

NVD HIGH: CVE-2026-42169 — A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file load...

A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the `load_layer()` function. Both vulnerabilities can be triggered by opening

CVE-2026-42169
NIST NVD
HIGHVulnerability

NVD HIGH: CVE-2026-14818 — A path traversal vulnerability in the CLI command used to execute configuration ...

A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50(W) series firmware versions from V4.16 through V5.42 Patch 1, and USG20(W)-VPN series firmware versions from V4.16 through V5.42 Patch 1 could allow an authentica

CVE-2026-14818
NIST NVD
HIGHVulnerability

NVD HIGH: CVE-2026-66322 — Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorize...

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-66322
NIST NVD