CVE-2026-11730
LOW5.4CVSS v3
—CVSS v2
0.19%
EPSS (exploit probability)
CWE-335CWE
Description
Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.
CVSS v3 vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
Affected routers (0)
No routers currently mapped to this CVE in our database.