Remote Access Vulnerability in NETGEAR Devices Exposing Telnet Functionality
CVE-2026-24714

8.7HIGH

Key Information:

Vendor

Netgear
Status
Netgear Products
Vendor
CVE Published:
30 January 2026

What is CVE-2026-24714?

Certain NETGEAR products that have reached their end of service feature a Telnet functionality that can be enabled via a magic packet. This presents a potential security risk as unauthorized users might exploit this to gain remote access, allowing them to execute commands on the device. Users of affected NETGEAR models should take precautions and consider disabling this feature to mitigate the risk of unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

NETGEAR products versions which provide "TelnetEnable" functionality

References

https://www.netgear.com/about/eos/
https://jvn.jp/en/jp/JVN46722282/

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.