Insufficient Authentication in NETGEAR WiFi Range Extenders

CVE-2026-0407

What is CVE-2026-0407?

An insufficient authentication vulnerability has been identified in NETGEAR WiFi range extenders, allowing network-adjacent attackers, either via WiFi authentication or a physical Ethernet connection, to bypass the authentication process. This flaw enables unauthorized access to the admin panel, potentially leading to network changes and data breaches. Users of affected models should take immediate action to secure their devices.

References