CVE-2026-0408
HIGH WAF: Low
CVSS 8.0
Published: 2026-01-13
CWE-287
A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents of the dynamically generated webproc file, which records the username and password submitted to the router GUI.
WAF Coverage Analysis
Improper Authentication
Low WAF Coverage
OWASP: A07:2021 Identification and Authentication Failures
Affected Software
| Vendor | Product | Version |
|---|---|---|
| netgear | ex2800_firmware | up to 1.0.1.82 |
| netgear | ex3110_firmware | up to 1.0.1.82 |
| netgear | ex5000_firmware | up to 1.0.1.82 |
| netgear | ex6110_firmware | up to 1.0.1.82 |
References
- kb.netgear.com (Vendor Advisory, Patch)
- www.netgear.com (Product, Patch)
- www.netgear.com (Product, Patch)
- www.netgear.com (Product, Patch)
- www.netgear.com (Product, Patch)