{"vulnerability": "CVE-2026-6837", "sightings": [{"uuid": "559af8af-465e-4f3f-894a-2f18eb606fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msb6peubta2r", "content": "CVE-2026-6837 - Post-auth command injection in Zyxel WAX650S export-cgi. Admin RCE. CVSS 7.2. Unpatched - restrict admin access now. #CVE #Zyxel #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-6837/", "creation_timestamp": "2026-08-04T14:06:53.465797Z"}, {"uuid": "c9baad47-8b10-4831-83d4-0658e21f4fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117037623751892634", "content": "CVE-2026-6837 - Post-auth command injection in Zyxel WAX650S export-cgi. Admin RCE. CVSS 7.2. Unpatched - restrict admin access now. #CVE #Zyxel #infosec\nhttps://www.valtersit.com/cve/CVE-2026-6837/", "creation_timestamp": "2026-08-04T14:06:56.191637Z"}, {"uuid": "0312e961-6d31-4a12-9308-61271c571350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtjbx4vqis2b", "content": "CVE-2026-6837 affects 18 Zyxel APs\u2014admin access allows root command injection via export-cgi. Patch now. #Cybersecurity #Bugs #Zyxel #Firmware #CommandInjection #NetworkSecurity https://thedailytechfeed.com/zyxel-fixes-high-severity-command-injection-bug-in-18-access-points/", "creation_timestamp": "2026-08-20T12:51:25.385253Z"}, {"uuid": "32199ba3-946c-454c-81e0-f84576417f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mtof2ncryk2s", "content": "Zyxel devices vulnerable to authenticated command injection in certificate export. New CVE-2026-6837 analysis reveals attack surface in PKCS#12\u2026\n\nhttps://www.reddit.com/r/netsec/comments/1vq55y4/cve20266837_command_injection_in_zyxel_exportcgi/\n\n#cybersecurity #infosec", "creation_timestamp": "2026-08-22T13:30:21.985192Z"}, {"uuid": "08133c0e-b6cd-4dc6-bba9-423a008198dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "seen", "source": "Telegram/2uUwMFxsoKh_D8GaE8ocpIxirsxPfGRgU4xV4XjnGV-coGw", "content": "", "creation_timestamp": "2026-08-17T18:00:04.728092Z"}, {"uuid": "7436e93c-68cf-4f7a-967e-48170c695450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "seen", "source": "Telegram/pno4qgE4SZQiQo8fq1NZyMaJw7LGofB6B2FJdOg13udntKs", "content": "", "creation_timestamp": "2026-08-17T18:00:05.075151Z"}, {"uuid": "d0a85c46-2e5b-46c2-b48f-a00759cd08d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "published-proof-of-concept", "source": "Telegram/pno4qgE4SZQiQo8fq1NZyMaJw7LGofB6B2FJdOg13udntKs", "content": "", "creation_timestamp": "2026-08-18T00:00:11.120548Z"}, {"uuid": "f7cad23c-0333-40ba-943a-8c0175d74124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "published-proof-of-concept", "source": "Telegram/2uUwMFxsoKh_D8GaE8ocpIxirsxPfGRgU4xV4XjnGV-coGw", "content": "", "creation_timestamp": "2026-08-18T00:00:11.963590Z"}, {"uuid": "cfbac8e0-c3a7-4c40-ae60-c925b7955117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "seen", "source": "https://t.me/GithubRedTeam/98354", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6837-zyxel-export-cgi-command-injection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a minanagehsalalma\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-16 17:45:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic writeup, PoC, and emulation materials for CVE-2026-6837 affecting Zyxel export-cgi PKCS#12 export handling.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:09.551322Z"}, {"uuid": "89dc7974-4f74-4526-b3a4-9d9913cf2f16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "seen", "source": "https://t.me/GithubRedTeam/98354", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6837-zyxel-export-cgi-command-injection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a minanagehsalalma\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-16 17:45:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic writeup, PoC, and emulation materials for CVE-2026-6837 affecting Zyxel export-cgi PKCS#12 export handling.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:33.053861Z"}, {"uuid": "154c4b9a-10ac-4536-8cfa-8cd81e676989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6837", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98354", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6837-zyxel-export-cgi-command-injection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a minanagehsalalma\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-16 17:45:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic writeup, PoC, and emulation materials for CVE-2026-6837 affecting Zyxel export-cgi PKCS#12 export handling.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:10.611917Z"}]}