Medium · 6.1 CVE-2026-0408 EUVD-2026-2218GHSA-rhrj-763h-99fq

Path traversal vulnerability in Netgear WiFi Range Extenders

Published Jan 13, 2026 · Updated Feb 26, 2026 · Assigned by NETGEAR

Vendor: NETGEAR Product: EX2800 Product: EX3110 Product: EX5000 Product: EX6110 Category: Network devices

Description

A path traversal vulnerability in NETGEAR WiFi range extenders allows
an attacker with LAN authentication to access the router's IP and
review the contents of the dynamically generated webproc file, which
records the username and password submitted to the router GUI.

Affected products

Vendor	Product	Affected	Fixed
NETGEAR	EX5000	< v1.0.1.82	v1.0.1.82
NETGEAR	EX3110	< v1.0.1.82	v1.0.1.82
NETGEAR	EX6110	< v1.0.1.82	v1.0.1.82
NETGEAR	EX2800	< v1.0.1.82	v1.0.1.82

References

https://www.netgear.com/support/product/ex5000 product patch
https://www.netgear.com/support/product/ex3110 product patch
https://www.netgear.com/support/product/ex6110 product patch
https://www.netgear.com/support/product/ex2800 product patch
https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory vendor-advisory