CVE-2026-11730Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models

Descripción

Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://www.netgear.com/support/product/ex3700 productpatch
• https://www.netgear.com/support/product/ex6120 productpatch
• https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory vendor-advisorypatch