{"uuid": "f0bdb96c-a6f4-4113-b0c3-410f49a7f8cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "seen", "source": "https://t.me/hacking_Attack/191118", "content": "I found this while reversing Zyxel\u2019s WAX650S firmware and following the certificate export path. A password field used during PKCS#12 export could break into a shell command and execute as root. The write-up covers the bug itself, how I traced it, and the full firmware-emulation setup I used to reproduce it without the physical AP.    submitted by    /u/TheReedemer69  (https://www.reddit.com/user/TheReedemer69) \n [link] (https://minanagehsalalma.github.io/CVE-2026-6837-zyxel-export-cgi-command-injection/?1)   [comments] (https://www.reddit.com/r/Pentesting/comments/1vrny8b/i_found_a_root_command_injection_in_zyxel/)", "creation_timestamp": "2026-09-01T20:00:05.497791Z"}