The vulnerability identified as CVE-2026-6373 affects Zyxel Networks WAH7601 devices and involves the exposure of sensitive system information to unauthorized control spheres. This exposure allows an attacker to perform web application fingerprinting, potentially aiding further attacks. The CVSS v3.1 score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability impacts confidentiality but does not affect integrity or availability. There is no vendor advisory or patch information available to confirm remediation status.

An attacker can obtain sensitive system information from the Zyxel WAH7601 device without authentication or user interaction. This information disclosure could facilitate reconnaissance and subsequent targeted attacks. However, the vulnerability does not directly allow modification or disruption of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit network exposure of the affected device and monitor for unusual access attempts.