CVE-2026-0408: Path traversal vulnerability in Netgear WiFi Range Extenders
A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents of the dynamically generated webproc file, which records the username and password submitted to the router GUI.
Affected Software
Remediation
Information
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0408?
CVE-2026-0408 is classified as a high-severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2026-0408?
To fix CVE-2026-0408, update your NETGEAR WiFi Range Extender to the latest firmware version provided by NETGEAR.
What devices are affected by CVE-2026-0408?
CVE-2026-0408 affects various models of NETGEAR WiFi Range Extenders including EX5000, EX3110, and EX6110.
What type of attack can exploit CVE-2026-0408?
An attacker can exploit CVE-2026-0408 through a path traversal attack following successful LAN authentication.
What information can be accessed through CVE-2026-0408?
CVE-2026-0408 may allow attackers to access the router's IP and view sensitive contents of the dynamically generated webproc file.