← voltar
CVE-2026-0408

Path traversal vulnerability in Netgear WiFi Range Extenders

CVSS 6.1 MEDIUMEPSS 0.2%CWE-287
A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents of the dynamically generated webproc file, which records the username and password submitted to the router GUI.
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
Produtos afetados
NETGEAR · EX2800NETGEAR · EX3110NETGEAR · EX5000NETGEAR · EX6110

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisoryhttps://www.netgear.com/support/product/ex2800https://www.netgear.com/support/product/ex3110https://www.netgear.com/support/product/ex5000https://www.netgear.com/support/product/ex6110