Medium severity5.4NVD Advisory· Published Oct 13, 2026· Updated Oct 13, 2026
CVE-2026-11730
CVE-2026-11730
Description
Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.
Affected products
3Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.