CVE-2026-11730
5.4MediumPublished 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Adjacent network
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
- Impact
- High impact on confidentiality
- Weakness
- CWE-335
Impact
An adjacent attacker with local network or Wi-Fi access can predict session IDs to hijack active administrator sessions on the web management portal. This allows unauthorized configuration changes and exposure of device settings.
Root cause
The web management portal uses insufficiently random session identifiers, making them predictable to attackers.
Affected systems
Versions not listed — check the vendor advisory for specific EX3700 and EX6120 firmware versions.
CVSS v3.1 · CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
Fix & remediation
Flash the latest firmware from the vendor advisory or product support pages for EX3700 and EX6120. If immediate patching is not possible, isolate the management interface to a trusted VLAN and avoid keeping active admin sessions open on untrusted Wi-Fi.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.