Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2026-0407

Authentication bypass in NETGEAR WiFi Range Extenders via network adjacent attacks

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NETGEAR

Description

An insufficient authentication vulnerability in NETGEAR WiFi range extenders allows a network adjacent attacker with WiFi authentication or a physical Ethernet port connection to bypass the authentication process and access the admin panel.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NETGEAR EX5000

Default version status: unaffected

  • 0 to < v1.0.1.82affected

NETGEAR EX3110

Default version status: unaffected

  • 0 to < v1.0.1.82affected

NETGEAR EX6110

Default version status: unaffected

  • 0 to < v1.0.1.82affected

NETGEAR EX2800

Default version status: unaffected

  • 0 to < v1.0.1.82affected

References