CVE-2026-0408

Publication date

2026-01-13 16:01:11

Family

NETGEAR

State

PUBLISHED

Description

A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the routers IP and review the contents of the dynamically generated webproc file, which records the username and password submitted to the router GUI.