6.3Medium
CVE-2026-15757Insufficient input validation vulnerability in NETGEAR DGND3700v1 modem router
Description
A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.
Weakness (CWE):
CWE-20
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| NETGEAR | DGND3700v1 | ≤ V1.0.0.17 |
References and patches
- https://www.netgear.com/support/product/dgnd3700v1 patchproduct
- https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory vendor-advisory