CVE-2026-11730
Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.
| CWE | CWE-335 |
| Vendor | netgear |
| Product | ex3700 |
| Published | Oct 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for netgear ex3700
Be the first to know when new unknown vulnerabilities affecting netgear ex3700 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
NETGEAR / EX3700
0 < V1.0.0.102
NETGEAR / EX6120
0 < V1.0.1.74
References
Credits
KDec5ae262-35b5-41c5-9bc1-91ad34145487 and Austin Turecek (Collaborator)