Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2026-0408

Path traversal vulnerability in Netgear WiFi Range Extenders

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NETGEAR

Description

A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents of the dynamically generated webproc file, which records the username and password submitted to the router GUI.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NETGEAR EX5000

Default version status: unaffected

  • 0 to < v1.0.1.82affected

NETGEAR EX3110

Default version status: unaffected

  • 0 to < v1.0.1.82affected

NETGEAR EX6110

Default version status: unaffected

  • 0 to < v1.0.1.82affected

NETGEAR EX2800

Default version status: unaffected

  • 0 to < v1.0.1.82affected

References