{"id":"CVE-2026-0408","aliases":["EUVD-2026-2218","GHSA-rhrj-763h-99fq"],"status":"published","title":"Path traversal vulnerability in Netgear WiFi Range Extenders","description":"A path traversal vulnerability in NETGEAR WiFi range extenders allows\n an attacker with LAN authentication to access the router's IP and \nreview the contents of the dynamically generated webproc file, which \nrecords the username and password submitted to the router GUI.","severity":{"version":"4.0","score":6.1,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0025,"percentile":0.16375,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2026-01-13T16:01:11Z","modified":"2026-06-17T10:10:46Z","products":[{"vendor":"netgear","product":"ex2800"},{"vendor":"netgear","product":"ex2800_firmware"},{"vendor":"netgear","product":"ex3110"},{"vendor":"netgear","product":"ex3110_firmware"},{"vendor":"netgear","product":"ex5000"},{"vendor":"netgear","product":"ex5000_firmware"},{"vendor":"netgear","product":"ex6110"},{"vendor":"netgear","product":"ex6110_firmware"}],"references":[{"url":"https://www.netgear.com/support/product/ex5000","tags":["product","patch","Patch","Product"]},{"url":"https://www.netgear.com/support/product/ex3110","tags":["product","patch","Patch","Product"]},{"url":"https://www.netgear.com/support/product/ex6110","tags":["product","patch","Patch","Product"]},{"url":"https://www.netgear.com/support/product/ex2800","tags":["product","patch","Patch","Product"]},{"url":"https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory","tags":["vendor-advisory","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0408"},{"url":"https://github.com/advisories/GHSA-rhrj-763h-99fq"}],"sources":{"cve":[{"id":"CVE-2026-0408","title":"Path traversal vulnerability in Netgear WiFi Range Extenders","description":"A path traversal vulnerability in NETGEAR WiFi range extenders allows\n an attacker with LAN authentication to access the router's IP and \nreview the contents of the dynamically generated webproc file, which \nrecords the username and password submitted to the router GUI.","status":"published","published":"2026-01-13T16:01:11.201Z","modified":"2026-02-26T15:04:43.819Z","cvss":[{"version":"4.0","score":6.1,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","level":"medium","assessor":"cna"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:20:13.962274Z"}],"euvd":[{"id":"EUVD-2026-2218","description":"A path traversal vulnerability in NETGEAR WiFi range extenders allows\n an attacker with LAN authentication to access the router's IP and \nreview the contents of the dynamically generated webproc file, which \nrecords the username and password submitted to the router GUI.","status":"published","published":"2026-01-13T16:01:11Z","modified":"2026-02-26T15:04:43Z","cvss":[{"version":"4.0","score":6.1,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","level":"medium"}],"updated_at":"2026-11-02T19:48:26.495238Z"}],"ghsa":[{"id":"GHSA-rhrj-763h-99fq","title":"A path traversal vulnerability in NETGEAR WiFi range extenders allows\n an attacker with LAN...","description":"A path traversal vulnerability in NETGEAR WiFi range extenders allows\n an attacker with LAN authentication to access the router's IP and \nreview the contents of the dynamically generated webproc file, which \nrecords the username and password submitted to the router GUI.","status":"published","published":"2026-01-13T18:31:07Z","modified":"2026-02-20T21:31:17Z","cvss":[{"version":"4.0","score":6.1,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","level":"medium"},{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:06:18.00539Z"}],"nvd":[{"id":"CVE-2026-0408","description":"A path traversal vulnerability in NETGEAR WiFi range extenders allows\n an attacker with LAN authentication to access the router's IP and \nreview the contents of the dynamically generated webproc file, which \nrecords the username and password submitted to the router GUI.","status":"published","published":"2026-01-13T16:16:11.017Z","modified":"2026-06-17T10:10:46.33Z","cvss":[{"version":"4.0","score":6.1,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","level":"medium","assessor":"secondary"},{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:12:03.683495Z"}]}}