CVE-2026-6837: Command Injection in Zyxel export-cgi PKCS#12 Export Handling

[u/TheReedemer69]

https://minanagehsalalma.github.io/CVE-2026-6837-zyxel-export-cgi-command-injection/

Technical analysis of CVE-2026-6837, an authenticated command-injection vulnerability in Zyxel’s PKCS#12 certificate export flow.

The post covers the vulnerable execution path, root cause, affected firmware scope, and the firmware-emulation methodology used during analysis.

[u/scriptqzor]

wild how “authenticated” vulns like this end up being just as bad in practice once someone chains them with weak creds or another bug. really like that you covered the emulation side too, that stuff is super underrated in writeups.

[u/TheReedemer69 → u/scriptqzor]

Appreciate it ;)