This vulnerability (CVE-2026-6373) in Zyxel Networks WAH7601 involves exposure of sensitive system information to an unauthorized control sphere, classified under CWE-497. This exposure allows an attacker to perform web application fingerprinting, potentially aiding further attacks. The affected versions include WAH7601 devices up to version 20072026. The CVSS 3.1 base score is 6.5 with attack vector as adjacent network, low attack complexity, no privileges required, no user interaction, and high confidentiality impact but no integrity or availability impact. No official patch or remediation guidance is currently available.

The vulnerability allows unauthorized parties to access sensitive system information, which can compromise confidentiality. This may facilitate reconnaissance activities such as web application fingerprinting, potentially leading to more targeted attacks. However, there is no reported impact on system integrity or availability. No known exploits have been observed in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation is documented, users should monitor Zyxel Networks advisories for updates. Until a patch is available, restricting network access to the affected device and limiting exposure to adjacent networks may reduce risk.