High severity8.0NVD Advisory· Published Jan 13, 2026· Updated Jun 17, 2026

CVE-2026-0408

Description

A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents of the dynamically generated webproc file, which records the username and password submitted to the router GUI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/WiFi range extendersllm-fuzzy
Netgear/EX2800llm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 0
Netgear/EX3110llm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 0
Netgear/EX5000llm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 0
Netgear/EX6110llm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 0
Netgear/Ex2800 Firmware
cpe:2.3:o:netgear:ex2800_firmware:*:*:*:*:*:*:*:*
Range: <1.0.1.82
Netgear/Ex3110 Firmware
cpe:2.3:o:netgear:ex3110_firmware:*:*:*:*:*:*:*:*
Range: <1.0.1.82
Netgear/Ex5000 Firmware
cpe:2.3:o:netgear:ex5000_firmware:*:*:*:*:*:*:*:*
Range: <1.0.1.82
Netgear/Ex6110 Firmware
cpe:2.3:o:netgear:ex6110_firmware:*:*:*:*:*:*:*:*
Range: <1.0.1.82

Patches

Vulnerability mechanics

References

kb.netgear.com/000070442/January-2026-NETGEAR-Security-AdvisorynvdPatchVendor Advisory
www.netgear.com/support/product/ex2800nvdPatchProduct
www.netgear.com/support/product/ex3110nvdPatchProduct
www.netgear.com/support/product/ex5000nvdPatchProduct
www.netgear.com/support/product/ex6110nvdPatchProduct

News mentions

No linked articles in our index yet.

cvss	0.520
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000