high8.0
CVE-2026-0408
A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents of …
Impact
A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents of the dynamically generated webproc file, which records the username and password submitted to the router GUI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Ex2800 Firmware | before 1.0.1.82 |
| Netgear | Ex3110 Firmware | before 1.0.1.82 |
| Netgear | Ex5000 Firmware | before 1.0.1.82 |
| Netgear | Ex6110 Firmware | before 1.0.1.82 |