CVE-2026-35019 PUBLISHED

NetComm NF20MESH < R6B032 Hardcoded AES Key Authentication Bypass

Assigner: VulnCheck
Reserved: 31.03.2026 Published: 23.06.2026 Updated: 23.06.2026

NetComm NF20MESH routers running firmware R6B031 and earlier contain an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by exploiting a hardcoded AES-256 key used to encrypt session cookies for the web management interface. Attackers can forge a valid encrypted session cookie using the shared hardcoded key and bypass authentication checks to obtain full administrative control of the management interface while any legitimate administrator session is active.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS Score: 9.2

Product Status

Vendor NetComm Wireless Pty Ltd
Product NF20MESH
Versions Default: affected
  • affected from 0 to R6B032 (excl.)

Credits

  • Brendan Scarvell of Signal 11 finder

References

Problem Types

  • Use of Hard-coded Cryptographic Key CWE