CVE-2026-11730
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Oct 13, 2026
Vendor
unknown
Description
Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.