CVE-2026-0407: NETGEAR EX2800 Firmware

High severity, CVSS 8.0. EPSS: 0.2% chance of exploitation in the next 30 days.

An insufficient authentication vulnerability in NETGEAR WiFi range extenders allows a network adjacent attacker with WiFi authentication or a physical Ethernet port connection to bypass the authentication process and access the admin panel.

Affected products

• NETGEAR EX2800 Firmware: before 1.0.1.82 (fixed in 1.0.1.82)
• NETGEAR EX3110 Firmware: before 1.0.1.82 (fixed in 1.0.1.82)
• NETGEAR EX5000 Firmware: before 1.0.1.82 (fixed in 1.0.1.82)
• NETGEAR EX6110 Firmware: before 1.0.1.82 (fixed in 1.0.1.82)

Published 2026-01-13. Last modified 2026-06-17.