CVE-2026-0407: Authentication bypass in NETGEAR WiFi Range Extenders via network adjacent attacks
An insufficient authentication vulnerability in NETGEAR WiFi range extenders allows a network adjacent attacker with WiFi authentication or a physical Ethernet port connection to bypass the authentication process and access the admin panel.
Affected Software
Remediation
Information
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0407?
CVE-2026-0407 is classified as a high severity vulnerability due to its potential to allow unauthorized access.
How do I fix CVE-2026-0407?
To fix CVE-2026-0407, update your NETGEAR WiFi range extender to the latest firmware version as provided by NETGEAR.
Who is affected by CVE-2026-0407?
CVE-2026-0407 affects users of specific NETGEAR WiFi range extenders who have not applied the latest security updates.
What type of attack is associated with CVE-2026-0407?
CVE-2026-0407 allows for network adjacent attacks which can bypass the authentication mechanisms of the devices.
What are the risks of CVE-2026-0407?
The risks of CVE-2026-0407 include unauthorized access to the network, potentially leading to data breaches and network exploitation.