NETGEAR EX3110 Firmware vulnerabilities

3 CVEs affecting NETGEAR EX3110 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-0408, published 2026-01-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-35800, published 2020-12-30. Critical severity, CVSS 9.4. EPSS: 1.6% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40…
CVE-2026-0408, published 2026-01-13. High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days. A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents of the dynamically generated webproc…
CVE-2026-0407, published 2026-01-13. High severity, CVSS 8.0. EPSS: 0.2% chance of exploitation in the next 30 days. An insufficient authentication vulnerability in NETGEAR WiFi range extenders allows a network adjacent attacker with WiFi authentication or a physical Ethernet port connection to bypass the…