CVE-2026-0407

CVE-2026-0407 is an insufficient authentication vulnerability affecting several NETGEAR WiFi range extenders, including the EX2800, EX3110, EX5000, and EX6110 series. This flaw allows a network-adjacent attacker, with either WiFi authentication or a physical Ethernet connection, to bypass the authentication process and gain unauthorized access to the device's administrative panel. Rated with a CVSS score of 8.0 (High), the vulnerability is easily exploitable with low attack complexity, posing a significant risk of high confidentiality, integrity, and availability impact. While there is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness among security researchers.