CVE-2026-35019
NetComm NF20MESH < R6B032 Hardcoded AES Key Authentication Bypass
CVSS Score
8.1
EPSS Score
0.0%
EPSS Percentile
0th
NetComm NF20MESH routers running firmware R6B031 and earlier contain an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by exploiting a hardcoded AES-256 key used to encrypt session cookies for the web management interface. Attackers can forge a valid encrypted session cookie using the shared hardcoded key and bypass authentication checks to obtain full administrative control of the management interface while any legitimate administrator session is active.
| CWE | CWE-321 |
| Vendor | netcomm wireless pty ltd |
| Product | nf20mesh |
| Published | Jun 23, 2026 |
| Last Updated | Jun 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for netcomm wireless pty ltd nf20mesh
Be the first to know when new high vulnerabilities affecting netcomm wireless pty ltd nf20mesh are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
NetComm Wireless Pty Ltd / NF20MESH
0 < R6B032
References
signal11.io: https://signal11.io/advisories/netcomm-nf20-mesh-authentication-bypass support.netcommwireless.com: https://support.netcommwireless.com/api/Media/Firmware/4407c21d-e990-49a4-9754-b72475f20c76?Product=NF20MESH%20Release%20Notes.pdf support.netcommwireless.com: https://support.netcommwireless.com/products/nf20mesh#Firmware vulncheck.com: https://www.vulncheck.com/advisories/netcomm-nf20mesh-r6b032-hardcoded-aes-key-authentication-bypass
Credits
Brendan Scarvell of Signal 11