CVE-2026-11730Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models

Açıklama

Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Kaynaklar ve yamalar

• https://www.netgear.com/support/product/ex3700 productpatch
• https://www.netgear.com/support/product/ex6120 productpatch
• https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory vendor-advisorypatch