Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-0407 EUVD-2026-2231GHSA-56jh-3q9p-9x3q

Authentication bypass in NETGEAR WiFi Range Extenders via network adjacent attacks

Published Jan 13, 2026 · Updated Feb 26, 2026 · Assigned by NETGEAR

Description

An insufficient authentication vulnerability in NETGEAR WiFi range
extenders allows a network adjacent attacker with WiFi authentication or
a physical Ethernet port connection to bypass the authentication
process and access the admin panel.

Affected products

VendorProductAffectedFixed
NETGEAR EX5000 < v1.0.1.82 v1.0.1.82
NETGEAR EX3110 < v1.0.1.82 v1.0.1.82
NETGEAR EX6110 < v1.0.1.82 v1.0.1.82
NETGEAR EX2800 < v1.0.1.82 v1.0.1.82

References