CVE-2020-35223: NETGEAR GS116E Firmware

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The CSRF protection mechanism implemented in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices could be bypassed by omitting the CSRF token parameter in HTTP requests.

Affected products

• NETGEAR GS116E Firmware: version 2.6.0.43 only
• NETGEAR JGS516PE Firmware: version 2.6.0.43 only

Published 2021-03-10. Last modified 2026-06-17.