Critical severity9.8NVD Advisory· Published Mar 18, 2026· Updated Jun 17, 2026

CVE-2026-30702

Description

The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) implements a broken authentication mechanism in its web management interface. The login page does not properly enforce session validation, allowing attackers to bypass authentication by directly accessing restricted web application endpoints through forced browsing

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WiFi Extender WDR201A/WiFi Extender WDR201Adescription

Patches

Vulnerability mechanics

References

mstreet97.github.io/security-research/iot/vulnerability-disclosure/cybersecurity/cve/2026/02/18/From-Blackbox-to-Whitebox-Multiple-CVEs-in-a-Consumer-WiFi-Extender.htmlnvd
www.made-in-china.com/showroom/yeapook/nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000