CVE-2026-11730 PUBLISHED

Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models

Assigner: NETGEAR
Reserved: 09.06.2026 Published: 13.10.2026 Updated: 13.10.2026

Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.

Metrics

CVSS 4.0

CVSS Vector: CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber
CVSS Score: 4.5

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Adjacent	Confidentiality	High	Confidentiality	None
Attack Complexity	Low	Integrity	High	Integrity	None
Attack Requirements	Present	Availability	None	Availability	None
Privileges Required	Low
User Interaction	None

CVSS 4.0

Product Status

Vendor	NETGEAR
Product	EX3700
Versions	Default: unaffected affected from 0 to V1.0.0.102 (excl.)

Vendor	NETGEAR
Product	EX6120
Versions	Default: unaffected affected from 0 to V1.0.1.74 (excl.)

Solutions

Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:

ProductFixed VersionEX3700 (EoS) AC750 WiFi Range Extender Essentials Edition V1.0.0.102 https://www.netgear.com/support/product/ex3700 EX6120 AC1200 Dual Band WiFi Range Extender V1.0.1.74 https://www.netgear.com/support/product/ex6120

Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.

Credits

KDec5ae262-35b5-41c5-9bc1-91ad34145487 and Austin Turecek (Collaborator) finder

References

Problem Types

CWE-335 Incorrect usage of seeds in Pseudo-Random number generator (PRNG) CWE

Impacts

CAPEC-593 Session Hijacking