{"id":"CVE-2026-11730","revision":"eeca3f2f389b4fd7a497fc917c1b029b","records":[{"revision":"eeca3f2f389b4fd7a497fc917c1b029b","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-11730","aliases":[],"title":"Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models","description":"Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.","state":0,"publishedAt":"2026-10-13T14:38:16.11+00:00","modifiedAt":"2026-10-19T19:02:53.835+00:00","affected":[{"ecosystem":"Vendor product","name":"EX3700","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"NETGEAR\",\n                    \"product\": \"EX3700\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"V1.0.0.102\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"EX6120","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"NETGEAR\",\n                    \"product\": \"EX6120\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"V1.0.1.74\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber","score":2.1,"severity":"LOW"},{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","score":5.4,"severity":"MEDIUM"}],"references":["https://www.netgear.com/support/product/ex3700","https://www.netgear.com/support/product/ex6120","https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-11730","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-11730","identifiers":["CVE-2026-11730"]},"retained":false,"historicalAffected":[]}],"coverage":[]}