{"uuid": "9eaf214b-35b7-4f20-a6a3-65bf830a3c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/191118", "content": "I found this while reversing Zyxel\u2019s WAX650S firmware and following the certificate export path. A password field used during PKCS#12 export could break into a shell command and execute as root. The write-up covers the bug itself, how I traced it, and the full firmware-emulation setup I used to reproduce it without the physical AP.    submitted by    /u/TheReedemer69  (https://www.reddit.com/user/TheReedemer69) \n [link] (https://minanagehsalalma.github.io/CVE-2026-6837-zyxel-export-cgi-command-injection/?1)   [comments] (https://www.reddit.com/r/Pentesting/comments/1vrny8b/i_found_a_root_command_injection_in_zyxel/)", "creation_timestamp": "2026-09-02T01:00:25.804745Z"}