What is the CVSS score of CVE-2026-0407?

CVE-2026-0407 has a CVSS 3.1 base score of 8.0 (High). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Ex3110 Firmware are affected by CVE-2026-0407?

Organizations using An insufficient authentication vulnerability in NETGEAR WiFi range extenders face notable risk from CVE-2026-0407, a improper authentication vulnerability rated CVSS 8.0.. A patch is available.

How to fix or mitigate CVE-2026-0407?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Audit authentication configurations and rotate any potentially compromised credentials.

Ex3110 Firmware CVE-2026-0407

HIGH

Improper Authentication (CWE-287)

2026-01-13 a2826606-91e7-4eb6-899e-8484bd4575d5

Netgear Ex3110 Firmware Ex6110 Firmware Ex5000 Firmware Ex2800 Firmware

8.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.0 HIGH

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

Patch released

Feb 20, 2026 - 19:40 nvd

Patch available

CVE Published

Jan 13, 2026 - 16:16 nvd

HIGH 8.0

DescriptionCVE.org

An insufficient authentication vulnerability in NETGEAR WiFi range extenders allows a network adjacent attacker with WiFi authentication or a physical Ethernet port connection to bypass the authentication process and access the admin panel.

AnalysisAI

NETGEAR WiFi extenders (Ex3110, Ex6110, Ex5000, Ex2800) contain an authentication bypass vulnerability that allows network-adjacent attackers with WiFi access or physical Ethernet connectivity to gain unauthorized admin panel access. An attacker can exploit insufficient authentication validation to fully compromise the device's confidentiality, integrity, and availability. A patch is available for affected firmware versions.

Technical ContextAI

Classified as CWE-287 (Improper Authentication). Affects Ex5000 Firmware. An insufficient authentication vulnerability in NETGEAR WiFi range extenders allows a network adjacent attacker with WiFi authentication or a physical Ethernet port connection to bypass the authentication process and access the admin panel.