CVE-2026-11730: CVE-2026-11730: güvenlik açığı

Açıklama (NVD)

Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.

Özet bilgiler

CVSS v3.1

5.4 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N

CVSS v4.0

2.1 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber

EPSS

%0,19 (yüzdelik 8)

CWE

CWE-335

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• kb.netgear.com
• www.netgear.com
• www.netgear.com
• CWE-335