Skip to content
CVE PROGRAM SOURCE RECORD2.1 Low

CVE-2026-11730

Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NETGEAR

Description

Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NETGEAR EX3700

Default version status: unaffected

  • 0 to < V1.0.0.102affected

NETGEAR EX6120

Default version status: unaffected

  • 0 to < V1.0.1.74affected

References