Zyxel disclosed CVE-2026-6837, a command injection vulnerability in the export-cgi program of WAX650S firmware through version 7.10(ABRM.4)C0 that lets authenticated administrators execute OS commands. The flaw scores 7.2 on CVSS v3.1 and was published August 3, 2026.
An authenticated attacker with administrator privileges could exploit it to execute arbitrary OS commands on the device.
Affected products are limited to one firmware branch.
Enterprise teams running Zyxel WAX650S should treat this as an immediate patching priority given the high impact on device integrity once admin credentials are obtained.
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Gears of War: E-Day has gone gold. Pre-install begins September 29 on Xbox Series X|S, Xbox on PC, and Steam. Early Access starts October 1 for Premium Edition buyers; the worldwide launch is October 6, including day-one Game Pass. On consoles the game is Xbox Series X|S exclusive, and it is also available on PC. Xbox Wire published Minimum, Recommended, and Ultra PC tiers that all need a 115 GB SSD; Steam’s store listing matches the 115 GB figure for Minimum and Recommended.
SpaceX has delayed the first orbital Starship flight from September 22 to September 28 pending regulatory approval. The mission will attempt to place 26 V3 Starlink satellites into a 275 km orbit and marks a key milestone after the program's initial test flight in 2023.
Snap has launched Specs, its first consumer AR glasses priced at $2,195 with preorder availability and fall shipping in three countries. The standalone device offers a 51-degree display, dual Snapdragon processors, four-hour battery life, and features from multiplayer games to contextual AI, targeting mainstream AR adoption at a premium.
Microsoft will hold a Windows and Surface event in San Francisco on October 7, 2026, framed as a conversation on how local AI will shape the next chapter of the PC. CEO Satya Nadella, Nvidia CEO Jensen Huang, and Windows and Surface lead Pavan Davuluri are expected to appear. Coverage is set for 10 a.m. PT / 1 p.m. ET.
CISA added CVE-2026-58704, an improper authorization vulnerability in Google Pixel cellular modems, to its Known Exploited Vulnerabilities catalog on September 16, 2026, with a remediation due date of September 19. Google’s Pixel bulletin notes indications of limited, targeted exploitation.
