PatchTheCVECVE-2026-0408: A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to
CVE-2026-0408 is a high-severity flaw (CVSS 8.0) affecting ex2800 firmware, ex3110 firmware, ex5000 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents of the dynamically generated webproc file, which records the username and password submitted to the router GUI.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 8.0 (High) |
| Attack vector | Adjacent network |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.2% (top 84%) |
| CISA exploited list | No |
| Weakness | CWE-287 |
| Published | 2026-01-13 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-0408?
ex2800 firmware: upgrade to 1.0.1.82; ex3110 firmware: upgrade to 1.0.1.82; ex5000 firmware: upgrade to 1.0.1.82. Exact commands for each OS are on this page.
Is CVE-2026-0408 being exploited?
CVE-2026-0408 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-0408 affect?
CVE-2026-0408 affects ex2800 firmware, ex3110 firmware, ex5000 firmware. Severity is high (CVSS 8.0). A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents of the dynamically generated webproc file, which records the username and passwor
How urgent is CVE-2026-0408?
Priority 32/100. High severity
Software pages
Netgear vulnerabilities · Wi-Fi vulnerabilities
Related CVEs
- CVE-2026-0407 HIGH 8.0 UPGRADE UPGRADE An insufficient authentication vulnerability in NETGEAR WiFi range extenders allows a network adjacent attack