High severity · published Jan 13, 2026
CVE-2026-0408
A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents of the dynamically…
8.0
CVSS
0.2%
EPSS
No
On KEV
Description
A path traversal vulnerability in NETGEAR WiFi range extenders allows
an attacker with LAN authentication to access the router's IP and
review the contents of the dynamically generated webproc file, which
records the username and password submitted to the router GUI.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EF
Ex2800 Firmware · Netgear
before 1.0.1.82 · source: NVD
EF
Ex3110 Firmware · Netgear
before 1.0.1.82 · source: NVD
EF
Ex5000 Firmware · Netgear
before 1.0.1.82 · source: NVD
EF
Ex6110 Firmware · Netgear
before 1.0.1.82 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-0408
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-0408
Patch
https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory
Patch
https://www.netgear.com/support/product/ex2800
Patch
https://www.netgear.com/support/product/ex3110
Patch
https://www.netgear.com/support/product/ex5000
Patch
https://www.netgear.com/support/product/ex6110
More from Ex2800 Firmware
8.0
CVE-2026-0407
An insufficient authentication vulnerability in NETGEAR WiFi range extenders allows a network adjacent attacker with WiFi authentication or a physical Ethernet port connection…